HIGH
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors
Published Jul 2, 2009
10.0
HIGHCVSS 2.0
EPSS 4.41%
Description
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.
Affected products
No data.
OR
- ≤ snv_95
- ≤ snv_95
- ≤ snv_118
- ≤ snv_118
- snv_01
- snv_01
- snv_02
- snv_02
- snv_03
- snv_03
- snv_04
- snv_04
- snv_05
- snv_05
- snv_06
- snv_06
- snv_07
- snv_07
- snv_08
- snv_08
- snv_09
- snv_09
- snv_10
- snv_10
- snv_11
- snv_12
- snv_13
- snv_14
- snv_15
- snv_16
- snv_17
- snv_18
- snv_19
- snv_20
- snv_21
- snv_21
- snv_22
- snv_22
- snv_23
- snv_23
- snv_24
- snv_24
- snv_25
- snv_25
- snv_26
- snv_26
- snv_27
- snv_27
- snv_28
- snv_28
- snv_29
- snv_29
- snv_30
- snv_30
- snv_31
- snv_31
- snv_32
- snv_32
- snv_33
- snv_33
- snv_34
- snv_34
- snv_35
- snv_35
- snv_36
- snv_36
- snv_37
- snv_37
- snv_38
- snv_38
- snv_39
- snv_39
- snv_40
- snv_40
- snv_41
- snv_41
- snv_42
- snv_42
- snv_43
- snv_43
- snv_44
- snv_44
- snv_45
- snv_45
- snv_46
- snv_46
- snv_47
- snv_47
- snv_48
- snv_48
- snv_49
- snv_49
- snv_50
- snv_50
- snv_51
- snv_51
- snv_52
- snv_52
- snv_53
- snv_53
- snv_54
- snv_54
- snv_55
- snv_55
- snv_56
- snv_56
- snv_57
- snv_57
- snv_58
- snv_58
- snv_59
- snv_59
- snv_60
- snv_60
- snv_61
- snv_61
- snv_62
- snv_62
- snv_63
- snv_63
- snv_64
- snv_64
- snv_65
- snv_65
- snv_66
- snv_66
- snv_67
- snv_67
- snv_68
- snv_68
- snv_69
- snv_69
- snv_70
- snv_70
- snv_71
- snv_71
- snv_72
- snv_72
- snv_73
- snv_73
- snv_74
- snv_74
- snv_75
- snv_75
- snv_76
- snv_76
- snv_77
- snv_77
- snv_78
- snv_78
- snv_79
- snv_79
- snv_80
- snv_80
- snv_81
- snv_81
- snv_82
- snv_82
- snv_83
- snv_83
- snv_84
- snv_84
- snv_85
- snv_85
- snv_86
- snv_86
- snv_87
- snv_87
- snv_88
- snv_88
- snv_89
- snv_89
- snv_90
- snv_90
- snv_91
- snv_91
- snv_92
- snv_92
- snv_93
- snv_93
- snv_94
- snv_94
- snv_96
- snv_96
- snv_97
- snv_97
- snv_98
- snv_98
- snv_99
- snv_99
- snv_100
- snv_100
- snv_101
- snv_101
- snv_102
- snv_102
- snv_103
- snv_103
- snv_104
- snv_104
- snv_105
- snv_105
- snv_106
- snv_106
- snv_107
- snv_107
- snv_108
- snv_108
- snv_109
- snv_109
- snv_110
- snv_110
- snv_111
- snv_111
- snv_112
- snv_112
- snv_113
- snv_113
- snv_114
- snv_114
- snv_115
- snv_115
- snv_116
- snv_116
- snv_117
- snv_117
- 10
- 10
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (10)
- http://osvdb.org/55519 vdb-entryx_refsource_OSVDB
- http://secunia.com/advisories/35672 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/42550 third-party-advisoryx_refsource_SECUNIA
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1 x_refsource_CONFIRMPatchVendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory
- http://www.securityfocus.com/bid/35546 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id?1022492 vdb-entryx_refsource_SECTRACK
- http://www.vupen.com/english/advisories/2009/1747 vdb-entryx_refsource_VUPEN
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 vdb-entryx_refsource_XF
- https://support.avaya.com/css/P8/documents/100058487 x_refsource_CONFIRM
| Link | Providers | Tags |
|---|---|---|
| http://osvdb.org/55519 | vdb-entryx_refsource_OSVDB | |
| http://secunia.com/advisories/35672 | third-party-advisoryx_refsource_SECUNIA | |
| http://secunia.com/advisories/42550 | third-party-advisoryx_refsource_SECUNIA | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1 | x_refsource_CONFIRMPatchVendor Advisory | |
| http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 | vendor-advisoryx_refsource_SUNALERTPatchVendor Advisory | |
| http://www.securityfocus.com/bid/35546 | vdb-entryx_refsource_BID | |
| http://www.securitytracker.com/id?1022492 | vdb-entryx_refsource_SECTRACK | |
| http://www.vupen.com/english/advisories/2009/1747 | vdb-entryx_refsource_VUPEN | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 | vdb-entryx_refsource_XF | |
| https://support.avaya.com/css/P8/documents/100058487 | x_refsource_CONFIRM |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 2, 2009
Updated Aug 7, 2024
Reserved Jul 2, 2009
Link CVE-2009-2296
CISA Vulnrichment
Updated n/a