Sun OpenSolaris 'smbfs(7FS)'本地信息泄漏漏洞

Bugraq ID: 35306 CNCAN ID：CNCAN-2009061202 Sun OpenSolaris是一款unix操作系统。 Sun OpenSolaris 'smbfs7FS'使用默认挂接权限时存在信息泄漏问题，本地非特权攻击者可以利用漏洞未授权访问读取CIFS挂接卷上的文件内容和目录列表。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...

Default credentials

smbfs in Sun OpenSolaris snv84 through snv110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes...

CVE-2009-2031

smbfs in Sun OpenSolaris snv84 through snv110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes...

CVE-2009-2031

The CVE-2009-2031 entry applies to Sun OpenSolaris smbfs (SNV_84 to SNV_110). It describes a localPrivilege issue where, when default mount permissions are used, local users can read arbitrary files and list arbitrary directories on CIFS volumes . The description identifies the affected component...

CVE-2009-2031

smbfs in Sun OpenSolaris snv84 through snv110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes...

CVE-2009-2029

Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv104, allows remote authenticated users to cause a denial of service NIS+ daemon hang via unspecified vectors related to NIS+ callbacks...

CVE-2009-2029

Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv104, allows remote authenticated users to cause a denial of service NIS+ daemon hang via unspecified vectors related to NIS+ callbacks...

CVE-2009-2029

CVE-2009-2029 affects rpc.nisd in Sun Solaris 8–10 and OpenSolaris prior to snv_104. Described as an unspecified vulnerability that allows remote authenticated users to cause a denial of service (NIS+ daemon hang) via NIS+ callbacks. No concrete root-cause, exploit details, or remediation are pro...

CVE-2009-2031: Exposure of Sensitive Information to an Unauthorized Actor

smbfs in Sun OpenSolaris snv84 through snv110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes...

CVE-2009-2012

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

Code injection

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

CVE-2009-2012

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

CVE-2009-2012

CVE-2009-2012 affects Sun OpenSolaris with CIFS server enabled, in idmap within SNV builds snv_88 through snv_110. A local-privilege context allows denial of service, causing idpmapd daemon crash and idmapd outage via unknown vectors. The public records do not provide concrete exploitation detail...

CVE-2009-2012: Undefined Security Weakness

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

CVE-2009-1933

CVE-2009-1933 affects Sun Solaris 8/9/10 and OpenSolaris prior to snv_117, where Kerberos credential caches are not managed correctly. The root cause is improper handling of Kerberos credentials, enabling local users to access Kerberized NFS mount points and shares via unspecified vectors. Impact...

CVE-2009-1763

Unspecified vulnerability in the Solaris Secure Digital slot driver aka sdhost in Sun OpenSolaris snv105 through snv108 on the x86 platform allows local users to gain privileges or cause a denial of service filesystem or memory corruption via unknown vectors...

Memory corruption

Unspecified vulnerability in the Solaris Secure Digital slot driver aka sdhost in Sun OpenSolaris snv105 through snv108 on the x86 platform allows local users to gain privileges or cause a denial of service filesystem or memory corruption via unknown vectors...

CVE-2009-1763

Unspecified vulnerability in the Solaris Secure Digital slot driver aka sdhost in Sun OpenSolaris snv105 through snv108 on the x86 platform allows local users to gain privileges or cause a denial of service filesystem or memory corruption via unknown vectors...

CVE-2009-1763

The CVE-2009-1763 entry concerns the Solaris OpenSolaris sdhost (Secure Digital slot driver) on x86, affecting snv_105 through snv_108. The vulnerability is described as unspecified with local privilege escalation or denial of service (filesystem or memory corruption) via unknown vectors. Connect...

CVE-2009-1763: Undefined Security Weakness

Unspecified vulnerability in the Solaris Secure Digital slot driver aka sdhost in Sun OpenSolaris snv105 through snv108 on the x86 platform allows local users to gain privileges or cause a denial of service filesystem or memory corruption via unknown vectors...