NVD

Id
48188  
Name
CVE-2009-0873  
Description
The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-11  
Modified Date
2009-04-02  
Seq
2009-0873  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242164 48188 CVE-2009-0873 1021832  View
242165 48188 CVE-2009-0873 http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1  View
242166 48188 CVE-2009-0873 250306  View
242167 48188 CVE-2009-0873 http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm  View
242168 48188 CVE-2009-0873 34062  View
242169 48188 CVE-2009-0873 ADV-2009-0657  View
242170 48188 CVE-2009-0873 ADV-2009-0814  View
242171 48188 CVE-2009-0873 solaris-nfsd-unauthorized-access(49171)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40120 JVNDB-2009-001126 Sun Solaris の NFS デーモンにおけるアクセス制限を回避される脆弱性 Sun Solaris の NFS デーモンには、NFSv3 を使用している場合に セキュリティモードの組み合わせが正しく実行されないため、アクセス制限を回避され、ファイルを読まれるまたは改ざんされる脆弱性が存在します。 CVE-2009-0873 38304 CVE-2009-0873 48188 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001126.html 2009-03-09 2009-04-08 View