CVE-2009-0873

The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other."

• sun opensolaris snv 01 • sun opensolaris snv 02 • sun opensolaris snv 03 • sun opensolaris snv 04 • sun opensolaris snv 05 • sun opensolaris snv 06 • sun opensolaris snv 07 • sun opensolaris snv 08 • sun opensolaris snv 09 • sun opensolaris snv 10 • sun opensolaris snv 20 • sun opensolaris snv 21 • sun opensolaris snv 22 • sun opensolaris snv 23 • sun opensolaris snv 24 • sun opensolaris snv 25 • sun opensolaris snv 26 • sun opensolaris snv 27 • sun opensolaris snv 28 • sun opensolaris snv 29 • sun opensolaris snv 30 • sun opensolaris snv 31 • sun opensolaris snv 32 • sun opensolaris snv 33 • sun opensolaris snv 34 • sun opensolaris snv 35 • sun opensolaris snv 36 • sun opensolaris snv 37 • sun opensolaris snv 38 • sun opensolaris snv 39 • sun opensolaris snv 40 • sun opensolaris snv 41 • sun opensolaris snv 42 • sun opensolaris snv 43 • sun opensolaris snv 44 • sun opensolaris snv 45 • sun opensolaris snv 46 • sun opensolaris snv 47 • sun opensolaris snv 48 • sun opensolaris snv 49 • sun opensolaris snv 50 • sun opensolaris snv 51 • sun opensolaris snv 52 • sun opensolaris snv 53 • sun opensolaris snv 54 • sun opensolaris snv 55 • sun opensolaris snv 56 • sun opensolaris snv 57 • sun opensolaris snv 58 • sun opensolaris snv 59 • sun opensolaris snv 60 • sun opensolaris snv 61 • sun opensolaris snv 62 • sun opensolaris snv 63 • sun opensolaris snv 64 • sun opensolaris snv 65 • sun opensolaris snv 66 • sun opensolaris snv 67 • sun opensolaris snv 68 • sun opensolaris snv 69 … and 32 more