Sun OpenSolaris 'idmap(1M)' Local Denial Of Service Vulnerability

Bugtraq ID:	35252
Class:	Unknown
CVE:	CVE-2009-2012
Remote:	No
Local:	Yes
Published:	Jun 05 2009 12:00AM
Updated:	Apr 13 2015 09:10PM
Credit:	Sun
Vulnerable:	Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100
Not Vulnerable:	Sun OpenSolaris build snv_111

Sun OpenSolaris 'idmap(1M)' Local Denial Of Service Vulnerability

Sun OpenSolaris is prone to a local denial-of-service vulnerability.

Local attackers may exploit this issue to cause the 'idpmapd(1M)' daemon to crash and the 'idmapd(1M)' SMF service to transition to the 'maintenance' state.

OpenSolaris builds snv_88 through snv_110 are vulnerable.

Sun OpenSolaris 'idmap(1M)' Local Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun OpenSolaris 'idmap(1M)' Local Denial Of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Sun OpenSolaris 'idmap(1M)' Local Denial Of Service Vulnerability

References:

• OpenSolaris Homepage (Oracle)
  
• 260508 A Security Vulnerability in idmap(1M) of OpenSolaris (Sun)