CVE Vulnerabilities

CVE-2009-0873

Published: Mar 11, 2009 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that override each other.

Affected Software

Name Vendor Start Version End Version
Opensolaris Sun snv_01 (including) snv_01 (including)
Opensolaris Sun snv_02 (including) snv_02 (including)
Opensolaris Sun snv_03 (including) snv_03 (including)
Opensolaris Sun snv_04 (including) snv_04 (including)
Opensolaris Sun snv_05 (including) snv_05 (including)
Opensolaris Sun snv_06 (including) snv_06 (including)
Opensolaris Sun snv_07 (including) snv_07 (including)
Opensolaris Sun snv_08 (including) snv_08 (including)
Opensolaris Sun snv_09 (including) snv_09 (including)
Opensolaris Sun snv_10 (including) snv_10 (including)
Opensolaris Sun snv_20 (including) snv_20 (including)
Opensolaris Sun snv_21 (including) snv_21 (including)
Opensolaris Sun snv_22 (including) snv_22 (including)
Opensolaris Sun snv_23 (including) snv_23 (including)
Opensolaris Sun snv_24 (including) snv_24 (including)
Opensolaris Sun snv_25 (including) snv_25 (including)
Opensolaris Sun snv_26 (including) snv_26 (including)
Opensolaris Sun snv_27 (including) snv_27 (including)
Opensolaris Sun snv_28 (including) snv_28 (including)
Opensolaris Sun snv_29 (including) snv_29 (including)
Opensolaris Sun snv_30 (including) snv_30 (including)
Opensolaris Sun snv_31 (including) snv_31 (including)
Opensolaris Sun snv_32 (including) snv_32 (including)
Opensolaris Sun snv_33 (including) snv_33 (including)
Opensolaris Sun snv_34 (including) snv_34 (including)
Opensolaris Sun snv_35 (including) snv_35 (including)
Opensolaris Sun snv_36 (including) snv_36 (including)
Opensolaris Sun snv_37 (including) snv_37 (including)
Opensolaris Sun snv_38 (including) snv_38 (including)
Opensolaris Sun snv_39 (including) snv_39 (including)
Opensolaris Sun snv_40 (including) snv_40 (including)
Opensolaris Sun snv_41 (including) snv_41 (including)
Opensolaris Sun snv_42 (including) snv_42 (including)
Opensolaris Sun snv_43 (including) snv_43 (including)
Opensolaris Sun snv_44 (including) snv_44 (including)
Opensolaris Sun snv_45 (including) snv_45 (including)
Opensolaris Sun snv_46 (including) snv_46 (including)
Opensolaris Sun snv_47 (including) snv_47 (including)
Opensolaris Sun snv_48 (including) snv_48 (including)
Opensolaris Sun snv_49 (including) snv_49 (including)
Opensolaris Sun snv_50 (including) snv_50 (including)
Opensolaris Sun snv_51 (including) snv_51 (including)
Opensolaris Sun snv_52 (including) snv_52 (including)
Opensolaris Sun snv_53 (including) snv_53 (including)
Opensolaris Sun snv_54 (including) snv_54 (including)
Opensolaris Sun snv_55 (including) snv_55 (including)
Opensolaris Sun snv_56 (including) snv_56 (including)
Opensolaris Sun snv_57 (including) snv_57 (including)
Opensolaris Sun snv_58 (including) snv_58 (including)
Opensolaris Sun snv_59 (including) snv_59 (including)
Opensolaris Sun snv_60 (including) snv_60 (including)
Opensolaris Sun snv_61 (including) snv_61 (including)
Opensolaris Sun snv_62 (including) snv_62 (including)
Opensolaris Sun snv_63 (including) snv_63 (including)
Opensolaris Sun snv_64 (including) snv_64 (including)
Opensolaris Sun snv_65 (including) snv_65 (including)
Opensolaris Sun snv_66 (including) snv_66 (including)
Opensolaris Sun snv_67 (including) snv_67 (including)
Opensolaris Sun snv_68 (including) snv_68 (including)
Opensolaris Sun snv_69 (including) snv_69 (including)
Opensolaris Sun snv_70 (including) snv_70 (including)
Opensolaris Sun snv_71 (including) snv_71 (including)
Opensolaris Sun snv_72 (including) snv_72 (including)
Opensolaris Sun snv_73 (including) snv_73 (including)
Opensolaris Sun snv_74 (including) snv_74 (including)
Opensolaris Sun snv_75 (including) snv_75 (including)
Opensolaris Sun snv_76 (including) snv_76 (including)
Opensolaris Sun snv_77 (including) snv_77 (including)
Opensolaris Sun snv_78 (including) snv_78 (including)
Opensolaris Sun snv_79 (including) snv_79 (including)
Opensolaris Sun snv_80 (including) snv_80 (including)
Opensolaris Sun snv_81 (including) snv_81 (including)
Opensolaris Sun snv_82 (including) snv_82 (including)
Opensolaris Sun snv_83 (including) snv_83 (including)
Opensolaris Sun snv_84 (including) snv_84 (including)
Opensolaris Sun snv_85 (including) snv_85 (including)
Opensolaris Sun snv_86 (including) snv_86 (including)
Opensolaris Sun snv_87 (including) snv_87 (including)
Opensolaris Sun snv_88 (including) snv_88 (including)
Opensolaris Sun snv_89 (including) snv_89 (including)
Opensolaris Sun snv_90 (including) snv_90 (including)
Opensolaris Sun snv_91 (including) snv_91 (including)
Opensolaris Sun snv_92 (including) snv_92 (including)
Opensolaris Sun snv_93 (including) snv_93 (including)
Opensolaris Sun snv_94 (including) snv_94 (including)
Opensolaris Sun snv_95 (including) snv_95 (including)
Opensolaris Sun snv_96 (including) snv_96 (including)
Opensolaris Sun snv_97 (including) snv_97 (including)
Opensolaris Sun snv_98 (including) snv_98 (including)
Opensolaris Sun snv_99 (including) snv_99 (including)
Sunos Sun 5.10 (including) 5.10 (including)

References