PT-2009-4727 · Sun · Opensolaris+1

Published 2009-07-02 · Updated 2017-08-17 · CVE-2009-2296

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 and earlier OpenSolaris versions prior to snv 119

Description The issue is related to the improper implementation of the nfs portmon setting in the NFSv4 server kernel module. This allows remote attackers to access shares and perform unauthorized actions such as reading, creating, and modifying arbitrary files.

Recommendations For Sun Solaris version 10 and earlier, update to a version that properly implements the nfs portmon setting. For OpenSolaris versions prior to snv 119, update to a version later than snv 119 to resolve the issue.

Fix

Related Identifiers

CVE-2009-2296

Affected Products

Opensolaris

Sun Solaris

References · 11

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2296 · Security Note
• http://secunia.com/advisories/42550 · Note
• http://securityfocus.com/bid/35546 · Note
• http://securitytracker.com/id?1022492 · Note
• http://vupen.com/english/advisories/2009/1747 · Note
• http://secunia.com/advisories/35672 · Note
• https://support.avaya.com/css/P8/documents/100058487 · Note
• http://osvdb.org/55519 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 · Note