Vulnerability Name:

CVE-2009-2031 (CCN-51066)

Assigned:2009-06-10
Published:2009-06-10
Updated:2009-06-19
Summary:smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
1.6 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
1.9 Low (CCN CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N)
1.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-200
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2009-2031

Source: CCN
Type: Sun Alert ID: 257548
A Security Vulnerability in OpenSolaris smbfs(7FS) may Expose Data to Unauthorized Users

Source: SUNALERT
Type: Vendor Advisory
257548

Source: CCN
Type: ASA-2009-233
A Security Vulnerability in OpenSolaris smbfs(7FS) may Expose Data to Unauthorized Users (Sun 257548)

Source: CCN
Type: OSVDB ID: 56470
OpenSolaris smbfs CIFS Volumes Arbitrary File / Directory Access

Source: BID
Type: UNKNOWN
35306

Source: CCN
Type: BID-35306
Sun OpenSolaris 'smbfs(7FS)' Local Information Disclosure Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2009-1569

Source: XF
Type: UNKNOWN
opensolaris-smbfs-information-disclosure(51066)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:sun:opensolaris:build_snv_89::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_89::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_95::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_95::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_88::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_84::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_84::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_86::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_85::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_100::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_100::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_102::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_102::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_91::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_90::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_104::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_104::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_101::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_101::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_105::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_105::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_92::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_93::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_94::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_99::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_98::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_97::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_96::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_94::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_99::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_97::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_98::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_96::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_103::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_103::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_106::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_106::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_107::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_107::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_108::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_109::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_110::sparc:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_108::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_109::x86:*:*:*:*:*
  • OR cpe:/o:sun:opensolaris:build_snv_110::x86:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sun opensolaris snv_84
    sun opensolaris snv_84
    sun opensolaris snv_85
    sun opensolaris snv_85
    sun opensolaris snv_86
    sun opensolaris snv_86
    sun opensolaris snv_87
    sun opensolaris snv_87
    sun opensolaris snv_88
    sun opensolaris snv_88
    sun opensolaris snv_89
    sun opensolaris snv_89
    sun opensolaris snv_90
    sun opensolaris snv_90
    sun opensolaris snv_91
    sun opensolaris snv_91
    sun opensolaris snv_92
    sun opensolaris snv_92
    sun opensolaris snv_93
    sun opensolaris snv_93
    sun opensolaris snv_94
    sun opensolaris snv_94
    sun opensolaris snv_95
    sun opensolaris snv_95
    sun opensolaris snv_96
    sun opensolaris snv_96
    sun opensolaris snv_97
    sun opensolaris snv_97
    sun opensolaris snv_98
    sun opensolaris snv_98
    sun opensolaris snv_99
    sun opensolaris snv_99
    sun opensolaris snv_100
    sun opensolaris snv_100
    sun opensolaris snv_101
    sun opensolaris snv_101
    sun opensolaris snv_102
    sun opensolaris snv_102
    sun opensolaris snv_103
    sun opensolaris snv_103
    sun opensolaris snv_104
    sun opensolaris snv_104
    sun opensolaris snv_105
    sun opensolaris snv_105
    sun opensolaris snv_106
    sun opensolaris snv_106
    sun opensolaris snv_107
    sun opensolaris snv_107
    sun opensolaris snv_108
    sun opensolaris snv_108
    sun opensolaris snv_109
    sun opensolaris snv_109
    sun opensolaris snv_110
    sun opensolaris snv_110
    sun opensolaris build_snv_89
    sun opensolaris build_snv_89
    sun opensolaris build_snv_95
    sun opensolaris build_snv_95
    sun opensolaris build_snv_88
    sun opensolaris build_snv_88
    sun opensolaris build_snv_84
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_86
    sun opensolaris build_snv_84
    sun opensolaris build_snv_86
    sun opensolaris build_snv_85
    sun opensolaris build_snv_87
    sun opensolaris build_snv_100
    sun opensolaris build_snv_100
    sun opensolaris build_snv_102
    sun opensolaris build_snv_102
    sun opensolaris build_snv_91
    sun opensolaris build_snv_91
    sun opensolaris build_snv_90
    sun opensolaris build_snv_90
    sun opensolaris build_snv_104
    sun opensolaris build_snv_104
    sun opensolaris build_snv_101
    sun opensolaris build_snv_101
    sun opensolaris build_snv_105
    sun opensolaris build_snv_105
    sun opensolaris build_snv_92
    sun opensolaris build_snv_92
    sun opensolaris build_snv_93
    sun opensolaris build_snv_94
    sun opensolaris build_snv_99
    sun opensolaris build_snv_98
    sun opensolaris build_snv_97
    sun opensolaris build_snv_96
    sun opensolaris build_snv_94
    sun opensolaris build_snv_93
    sun opensolaris build_snv_99
    sun opensolaris build_snv_97
    sun opensolaris build_snv_98
    sun opensolaris build_snv_96
    sun opensolaris build_snv_103
    sun opensolaris build_snv_103
    sun opensolaris build_snv_106
    sun opensolaris build_snv_106
    sun opensolaris build_snv_107
    sun opensolaris build_snv_107
    sun opensolaris build_snv_108
    sun opensolaris build_snv_109
    sun opensolaris build_snv_110
    sun opensolaris build_snv_108
    sun opensolaris build_snv_109
    sun opensolaris build_snv_110