CVEvulnerability
CVE-2009-3516
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.
Affected configurations
• ibm aix 5.3.0
• ibm aix 5.3.7
• ibm aix 5.3.8
• ibm aix 6.1
• ibm aix 6.1.0
• ibm aix 6.1.1
• ibm aix 6.1.2
Related
Weakness · not in database (1)
References
- http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496 Vendor Advisory
- http://www.securityfocus.com/bid/36545 Patch
- http://www.vupen.com/english/advisories/2009/2788 Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318 oval.cisecurity.org
- http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496 Vendor Advisory
- http://www.securityfocus.com/bid/36545 Patch
- http://www.vupen.com/english/advisories/2009/2788 Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318 oval.cisecurity.org