The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that override each other.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Opensolaris | Sun | snv_01 (including) | snv_01 (including) |
Opensolaris | Sun | snv_02 (including) | snv_02 (including) |
Opensolaris | Sun | snv_03 (including) | snv_03 (including) |
Opensolaris | Sun | snv_04 (including) | snv_04 (including) |
Opensolaris | Sun | snv_05 (including) | snv_05 (including) |
Opensolaris | Sun | snv_06 (including) | snv_06 (including) |
Opensolaris | Sun | snv_07 (including) | snv_07 (including) |
Opensolaris | Sun | snv_08 (including) | snv_08 (including) |
Opensolaris | Sun | snv_09 (including) | snv_09 (including) |
Opensolaris | Sun | snv_10 (including) | snv_10 (including) |
Opensolaris | Sun | snv_20 (including) | snv_20 (including) |
Opensolaris | Sun | snv_21 (including) | snv_21 (including) |
Opensolaris | Sun | snv_22 (including) | snv_22 (including) |
Opensolaris | Sun | snv_23 (including) | snv_23 (including) |
Opensolaris | Sun | snv_24 (including) | snv_24 (including) |
Opensolaris | Sun | snv_25 (including) | snv_25 (including) |
Opensolaris | Sun | snv_26 (including) | snv_26 (including) |
Opensolaris | Sun | snv_27 (including) | snv_27 (including) |
Opensolaris | Sun | snv_28 (including) | snv_28 (including) |
Opensolaris | Sun | snv_29 (including) | snv_29 (including) |
Opensolaris | Sun | snv_30 (including) | snv_30 (including) |
Opensolaris | Sun | snv_31 (including) | snv_31 (including) |
Opensolaris | Sun | snv_32 (including) | snv_32 (including) |
Opensolaris | Sun | snv_33 (including) | snv_33 (including) |
Opensolaris | Sun | snv_34 (including) | snv_34 (including) |
Opensolaris | Sun | snv_35 (including) | snv_35 (including) |
Opensolaris | Sun | snv_36 (including) | snv_36 (including) |
Opensolaris | Sun | snv_37 (including) | snv_37 (including) |
Opensolaris | Sun | snv_38 (including) | snv_38 (including) |
Opensolaris | Sun | snv_39 (including) | snv_39 (including) |
Opensolaris | Sun | snv_40 (including) | snv_40 (including) |
Opensolaris | Sun | snv_41 (including) | snv_41 (including) |
Opensolaris | Sun | snv_42 (including) | snv_42 (including) |
Opensolaris | Sun | snv_43 (including) | snv_43 (including) |
Opensolaris | Sun | snv_44 (including) | snv_44 (including) |
Opensolaris | Sun | snv_45 (including) | snv_45 (including) |
Opensolaris | Sun | snv_46 (including) | snv_46 (including) |
Opensolaris | Sun | snv_47 (including) | snv_47 (including) |
Opensolaris | Sun | snv_48 (including) | snv_48 (including) |
Opensolaris | Sun | snv_49 (including) | snv_49 (including) |
Opensolaris | Sun | snv_50 (including) | snv_50 (including) |
Opensolaris | Sun | snv_51 (including) | snv_51 (including) |
Opensolaris | Sun | snv_52 (including) | snv_52 (including) |
Opensolaris | Sun | snv_53 (including) | snv_53 (including) |
Opensolaris | Sun | snv_54 (including) | snv_54 (including) |
Opensolaris | Sun | snv_55 (including) | snv_55 (including) |
Opensolaris | Sun | snv_56 (including) | snv_56 (including) |
Opensolaris | Sun | snv_57 (including) | snv_57 (including) |
Opensolaris | Sun | snv_58 (including) | snv_58 (including) |
Opensolaris | Sun | snv_59 (including) | snv_59 (including) |
Opensolaris | Sun | snv_60 (including) | snv_60 (including) |
Opensolaris | Sun | snv_61 (including) | snv_61 (including) |
Opensolaris | Sun | snv_62 (including) | snv_62 (including) |
Opensolaris | Sun | snv_63 (including) | snv_63 (including) |
Opensolaris | Sun | snv_64 (including) | snv_64 (including) |
Opensolaris | Sun | snv_65 (including) | snv_65 (including) |
Opensolaris | Sun | snv_66 (including) | snv_66 (including) |
Opensolaris | Sun | snv_67 (including) | snv_67 (including) |
Opensolaris | Sun | snv_68 (including) | snv_68 (including) |
Opensolaris | Sun | snv_69 (including) | snv_69 (including) |
Opensolaris | Sun | snv_70 (including) | snv_70 (including) |
Opensolaris | Sun | snv_71 (including) | snv_71 (including) |
Opensolaris | Sun | snv_72 (including) | snv_72 (including) |
Opensolaris | Sun | snv_73 (including) | snv_73 (including) |
Opensolaris | Sun | snv_74 (including) | snv_74 (including) |
Opensolaris | Sun | snv_75 (including) | snv_75 (including) |
Opensolaris | Sun | snv_76 (including) | snv_76 (including) |
Opensolaris | Sun | snv_77 (including) | snv_77 (including) |
Opensolaris | Sun | snv_78 (including) | snv_78 (including) |
Opensolaris | Sun | snv_79 (including) | snv_79 (including) |
Opensolaris | Sun | snv_80 (including) | snv_80 (including) |
Opensolaris | Sun | snv_81 (including) | snv_81 (including) |
Opensolaris | Sun | snv_82 (including) | snv_82 (including) |
Opensolaris | Sun | snv_83 (including) | snv_83 (including) |
Opensolaris | Sun | snv_84 (including) | snv_84 (including) |
Opensolaris | Sun | snv_85 (including) | snv_85 (including) |
Opensolaris | Sun | snv_86 (including) | snv_86 (including) |
Opensolaris | Sun | snv_87 (including) | snv_87 (including) |
Opensolaris | Sun | snv_88 (including) | snv_88 (including) |
Opensolaris | Sun | snv_89 (including) | snv_89 (including) |
Opensolaris | Sun | snv_90 (including) | snv_90 (including) |
Opensolaris | Sun | snv_91 (including) | snv_91 (including) |
Opensolaris | Sun | snv_92 (including) | snv_92 (including) |
Opensolaris | Sun | snv_93 (including) | snv_93 (including) |
Opensolaris | Sun | snv_94 (including) | snv_94 (including) |
Opensolaris | Sun | snv_95 (including) | snv_95 (including) |
Opensolaris | Sun | snv_96 (including) | snv_96 (including) |
Opensolaris | Sun | snv_97 (including) | snv_97 (including) |
Opensolaris | Sun | snv_98 (including) | snv_98 (including) |
Opensolaris | Sun | snv_99 (including) | snv_99 (including) |
Sunos | Sun | 5.10 (including) | 5.10 (including) |