PT-2009-5809 · Ibm · Aix

Publicado 2009-10-01 · Atualizado 2017-09-19 · CVE-2009-3517

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3.x through 5.3.9 IBM AIX versions 6.1.0 through 6.1.2

Description The issue is related to the improper use of the nfs portmon setting by nfs.ext in IBM AIX, allowing remote attackers to bypass intended access restrictions for NFSv4 shares.

Recommendations For IBM AIX versions 5.3.x through 5.3.9, ensure proper configuration of the nfs portmon setting to enforce intended access restrictions. For IBM AIX versions 6.1.0 through 6.1.2, ensure proper configuration of the nfs portmon setting to enforce intended access restrictions.

Correção

Identificadores relacionados

CVE-2009-3517

Produtos afetados

Aix

Referências · 11

• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024 · Aviso do Fabricante
• http://securityfocus.com/bid/36544 · Correção
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6366 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399 · Aviso do Fabricante
• http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3517 · Nota de Segurança
• http://vupen.com/english/advisories/2009/2788 · Aviso do Fabricante