CVE-2009-2012: Low severity Sun OpenSolaris vulnerability
Published Jun 9, 2009
·Updated
Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors.
Affected Software
48 affected components
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_93
Sun OpenSolaris=snv_110
Sun OpenSolaris=snv_90-sparc
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_104
Sun OpenSolaris=snv_103
Sun OpenSolaris=snv_105
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_93
Sun OpenSolaris=snv_103
Sun OpenSolaris=snv_106
Sun OpenSolaris=snv_106
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_107
Sun OpenSolaris=snv_90-x86
Sun OpenSolaris=snv_89
Sun OpenSolaris=snv_90
Sun OpenSolaris=snv_96
Sun OpenSolaris=snv_99
Sun OpenSolaris=snv_107
Sun OpenSolaris=snv_97
Sun OpenSolaris=snv_100
Sun OpenSolaris=snv_96
Sun OpenSolaris=snv_94
Sun OpenSolaris=snv_98
Sun OpenSolaris=snv_98
Sun OpenSolaris=snv_109
Sun OpenSolaris=snv_95
Sun OpenSolaris=snv_108
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_105
Sun OpenSolaris=snv_108
Sun OpenSolaris=snv_95
Sun OpenSolaris=snv_88
Sun OpenSolaris=snv_92
Sun OpenSolaris=snv_104
Sun OpenSolaris=snv_94
Sun OpenSolaris=snv_101
Sun OpenSolaris=snv_97
Sun OpenSolaris=snv_99
Sun OpenSolaris=snv_109
Sun OpenSolaris=snv_102
Sun OpenSolaris=snv_110
Sun OpenSolaris=snv_91
Sun OpenSolaris=snv_89
Event History
Jun 9, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2012?
CVE-2009-2012 is considered a denial of service vulnerability that can lead to the idmapd daemon crash.
2
How do I fix CVE-2009-2012?
To remediate CVE-2009-2012, ensure that all relevant patches for Sun OpenSolaris versions are applied.
3
Which versions of Solaris are affected by CVE-2009-2012?
CVE-2009-2012 affects Sun OpenSolaris versions snv_88 through snv_110 on both x86 and sparc architectures.
4
Can CVE-2009-2012 be exploited remotely?
CVE-2009-2012 is a local vulnerability, meaning it requires local access to exploit.
5
What components are involved in CVE-2009-2012?
CVE-2009-2012 involves the idmap component of the CIFS server in Sun OpenSolaris.