PT-2009-5808 · Ibm · Ibm Aix

Anton Lundin · Publicado 2009-10-01 · Atualizado 2017-09-19 · CVE-2009-3516

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3.x through 5.3.9 IBM AIX versions 6.1.0 through 6.1.2

Description The issue is related to the handling of the NFSv4 Kerberos credential cache by gssd in IBM AIX. This improper handling allows local users to bypass intended access restrictions for Kerberized NFSv4 shares.

Recommendations For IBM AIX versions 5.3.x through 5.3.9, update to a version that properly handles the NFSv4 Kerberos credential cache. For IBM AIX versions 6.1.0 through 6.1.2, update to a version that properly handles the NFSv4 Kerberos credential cache.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-3516

Produtos afetados

Ibm Aix

Referências · 11

• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024 · Aviso do Fabricante
• http://securityfocus.com/bid/36545 · Correção
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3516 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399 · Aviso do Fabricante
• http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/2788 · Aviso do Fabricante