CVE-2009-3516 | BDVDB-2026-38787 Detail
Description#
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2009/2788
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096
- http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024
- http://www.securityfocus.com/bid/36545
- http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.