PT-2009-3465 · Sun · Sun Solaris+1

Published 2009-03-11 · Updated 2018-10-30 · CVE-2009-0873

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Solaris versions prior to snv 106 OpenSolaris versions prior to snv 106

Description The issue concerns the NFS daemon, which does not properly implement combinations of security modes when NFSv3 is used. This allows remote attackers to bypass intended access restrictions and read or modify files. The problem is related to security modes that override each other, such as a combination of the sec=sys and sec=krb5 security modes.

Recommendations For Sun Solaris versions prior to snv 106, update to a version after snv 106 to resolve the issue. For OpenSolaris versions prior to snv 106, update to a version after snv 106 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-0873

Affected Products

Opensolaris

Sun Solaris

References · 12

• 🔥 http://securitytracker.com/id?1021832 · Exploit
• 🔥 http://securityfocus.com/bid/34062 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0873 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1 · Vendor Advisory
• http://vupen.com/english/advisories/2009/0657 · Vendor Advisory
• http://secunia.com/advisories/34225 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1 · Vendor Advisory
• http://osvdb.org/52560 · Note
• http://vupen.com/english/advisories/2009/0814 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49171 · Note
• http://secunia.com/advisories/34435 · Note