NVD

Id
50717  
Name
CVE-2009-3516  
Description
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-01  
Modified Date
2010-08-21  
Seq
2009-3516  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256251 50717 CVE-2009-3516 http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc  View
256252 50717 CVE-2009-3516 oval:org.mitre.oval:def:6318  View
256253 50717 CVE-2009-3516 IZ49024  View
256254 50717 CVE-2009-3516 IZ49096  View
256255 50717 CVE-2009-3516 IZ49278  View
256256 50717 CVE-2009-3516 IZ50399  View
256257 50717 CVE-2009-3516 IZ50444  View
256258 50717 CVE-2009-3516 IZ50496  View
256259 50717 CVE-2009-3516 36545  View
256260 50717 CVE-2009-3516 ADV-2009-2788  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41187 JVNDB-2009-002194 IBM AIX の gssd における Kerberized NFSv4 共有のアクセス制限を回避される脆弱性 IBM AIX の gssd には、NFSv4 Kerberos 証明書キャッシュを適切に処理しないため、Kerberized NFSv4 共有のアクセス制限を回避される脆弱性が存在します。 CVE-2009-3516 40947 CVE-2009-3516 50717 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002194.html 2009-09-29 2009-11-09 View