CVE-2009-0872
Medium
Description
The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes.
SeverityMedium
CVSS6.8
Exploit probability—
ProductSun Opensolaris
PublishedMar 11, 2009
First seenMar 11, 2009
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun opensolaris | v ≤ snv_110, snv_01, snv_02, snv_03, snv_04, snv_05, snv_06, snv_07, snv_08, snv_09, snv_10, snv_11, snv_12, snv_13, snv_14, snv_15, snv_16, snv_17, snv_18, snv_19, snv_20, snv_21, snv_22, snv_23, snv_24, snv_25, snv_26, snv_27, snv_28, snv_29, snv_30, snv_31, snv_32, snv_33, snv_34, snv_35, snv_36, snv_37, snv_38, snv_39, snv_40, snv_41, snv_42, snv_43, snv_44, snv_45, snv_46, snv_47, snv_48, snv_49, snv_50, snv_51, snv_52, snv_53, snv_54, snv_55, snv_56, snv_57, snv_58, snv_59, snv_60, snv_61, snv_62, snv_63, snv_64, snv_65, snv_66, snv_67, snv_68, snv_69, snv_70, snv_71, snv_72, snv_73, snv_74, snv_75, snv_76, snv_77, snv_78, snv_79, snv_80, snv_81, snv_82, snv_83, snv_84, snv_85, snv_86, snv_87, snv_88, snv_89, snv_90, snv_91, snv_92, snv_93, snv_94, snv_95, snv_96, snv_97, snv_98, snv_99, snv_100, snv_101, snv_102, snv_103, snv_104, snv_105, snv_106, snv_107, snv_108, snv_109 | — |
| sun solaris | 10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.