PT-2009-4485 · Sun · Smbfs

Published 2009-06-11 · Updated 2009-06-19 · CVE-2009-2031

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions smbfs in Sun OpenSolaris versions snv 84 through snv 110

Description The issue allows local users to read arbitrary files and list arbitrary directories on CIFS volumes when default mount permissions are used.

Recommendations For versions snv 84 through snv 110, consider changing the default mount permissions to restrict access to sensitive files and directories on CIFS volumes. As a temporary workaround, restrict access to the CIFS volumes to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-2031

Affected Products

Smbfs

References · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-257548-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2031 · Security Note
• http://vupen.com/english/advisories/2009/1569 · Note
• http://securityfocus.com/bid/35306 · Note