Information disclosure in Sun Opensolaris

CVE-2009-2031

smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volumes.

Vulnerability class: Information Disclosure

EPSS: 0.003 (21.9th percentile) — read the EPSS interpretation.

Affected products

Sun Opensolaris — versions snv_84, snv_85, snv_86
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (vdb-entry, x_refsource_BID)