critical10.0
CVE-2009-2296
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote atta…
Impact
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Opensolaris | through snv_95 through snv_118 Versions snv_01, snv_02, snv_03, snv_04 |
| Sun | Solaris | Version 10 |
References
- NVD record
- CVE.org record
- http://osvdb.org/55519
- http://secunia.com/advisories/35672
- http://secunia.com/advisories/42550
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1
- http://www.securityfocus.com/bid/35546
- http://www.securitytracker.com/id?1022492
- http://www.vupen.com/english/advisories/2009/1747
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51450
- https://support.avaya.com/css/P8/documents/100058487
- http://osvdb.org/55519
- http://secunia.com/advisories/35672
- http://secunia.com/advisories/42550
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1
- http://www.securityfocus.com/bid/35546
- http://www.securitytracker.com/id?1022492
- http://www.vupen.com/english/advisories/2009/1747
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51450
- https://support.avaya.com/css/P8/documents/100058487