PT-2009-5809 · Ibm · Aix

Published 2009-10-01 · Updated 2017-09-19 · CVE-2009-3517

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3.x through 5.3.9 IBM AIX versions 6.1.0 through 6.1.2

Description The issue is related to the improper use of the nfs portmon setting by nfs.ext in IBM AIX, allowing remote attackers to bypass intended access restrictions for NFSv4 shares.

Recommendations For IBM AIX versions 5.3.x through 5.3.9, ensure proper configuration of the nfs portmon setting to enforce intended access restrictions. For IBM AIX versions 6.1.0 through 6.1.2, ensure proper configuration of the nfs portmon setting to enforce intended access restrictions.

Fix

Related Identifiers

CVE-2009-3517

Affected Products

Aix

References · 11

• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024 · Vendor Advisory
• http://securityfocus.com/bid/36544 · Patch
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399 · Vendor Advisory
• http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3517 · Security Note
• http://vupen.com/english/advisories/2009/2788 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6366 · Note