PT-2009-4727 · Sun · Opensolaris+1

Publicado 2009-07-02 · Atualizado 2017-08-17 · CVE-2009-2296

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 and earlier OpenSolaris versions prior to snv 119

Description The issue is related to the improper implementation of the nfs portmon setting in the NFSv4 server kernel module. This allows remote attackers to access shares and perform unauthorized actions such as reading, creating, and modifying arbitrary files.

Recommendations For Sun Solaris version 10 and earlier, update to a version that properly implements the nfs portmon setting. For OpenSolaris versions prior to snv 119, update to a version later than snv 119 to resolve the issue.

Correção

Identificadores relacionados

CVE-2009-2296

Produtos afetados

Opensolaris

Sun Solaris

Referências · 11

• http://secunia.com/advisories/42550 · Nota
• http://securityfocus.com/bid/35546 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1 · Aviso do Fabricante
• http://securitytracker.com/id?1022492 · Nota
• http://vupen.com/english/advisories/2009/1747 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 · Aviso do Fabricante
• http://secunia.com/advisories/35672 · Nota
• https://support.avaya.com/css/P8/documents/100058487 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2296 · Nota de Segurança
• http://osvdb.org/55519 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 · Nota