CVE-2009-2031

CVSS V2 Low 2.1 CVSS V3 None
Description
smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes.
Overview
  • CVE ID
  • CVE-2009-2031
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2009-06-11T21:30:00
  • Last Modified Date
  • 2009-06-19T05:32:30
Weakness Enumerations
CWE URL
CWE-200 http://cwe.mitre.org/data/definitions/200.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:* 1 OR
cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:P/I:N/A:N
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 2.1
  • Severity
  • LOW
  • Exploitability Score
  • 3.9
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/35306
http://sunsolve.sun.com/search/document.do?assetkey=1-66-257548-1 Vendor Advisory
http://www.vupen.com/english/advisories/2009/1569
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2009-2031
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2031
History
Created Old Value New Value Data Type Notes
2022-05-10 11:15:02 Added to TrackCVE