CVE-2009-0872

The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes.

• sun opensolaris (<= snv 110) • sun opensolaris snv 01 • sun opensolaris snv 02 • sun opensolaris snv 03 • sun opensolaris snv 04 • sun opensolaris snv 05 • sun opensolaris snv 06 • sun opensolaris snv 07 • sun opensolaris snv 08 • sun opensolaris snv 09 • sun opensolaris snv 10 • sun opensolaris snv 11 • sun opensolaris snv 12 • sun opensolaris snv 13 • sun opensolaris snv 14 • sun opensolaris snv 15 • sun opensolaris snv 16 • sun opensolaris snv 17 • sun opensolaris snv 18 • sun opensolaris snv 19 • sun opensolaris snv 20 • sun opensolaris snv 21 • sun opensolaris snv 22 • sun opensolaris snv 23 • sun opensolaris snv 24 • sun opensolaris snv 25 • sun opensolaris snv 26 • sun opensolaris snv 27 • sun opensolaris snv 28 • sun opensolaris snv 29 • sun opensolaris snv 30 • sun opensolaris snv 31 • sun opensolaris snv 32 • sun opensolaris snv 33 • sun opensolaris snv 34 • sun opensolaris snv 35 • sun opensolaris snv 36 • sun opensolaris snv 37 • sun opensolaris snv 38 • sun opensolaris snv 39 • sun opensolaris snv 40 • sun opensolaris snv 41 • sun opensolaris snv 42 • sun opensolaris snv 43 • sun opensolaris snv 44 • sun opensolaris snv 45 • sun opensolaris snv 46 • sun opensolaris snv 47 • sun opensolaris snv 48 • sun opensolaris snv 49 • sun opensolaris snv 50 • sun opensolaris snv 51 • sun opensolaris snv 52 • sun opensolaris snv 53 • sun opensolaris snv 54 • sun opensolaris snv 55 • sun opensolaris snv 56 • sun opensolaris snv 57 • sun opensolaris snv 58 • sun opensolaris snv 59 … and 51 more