| ID |
CVE-2009-3517
|
| Summary |
nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:5.3.0:*:*:*:*:*:*:*
-
cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:5.3.7:*:*:*:*:*:*:*
-
cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:5.3.8:*:*:*:*:*:*:*
-
cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*
-
cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:6.1.0:*:*:*:*:*:*:*
-
cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:6.1.1:*:*:*:*:*:*:*
-
cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:6.1.2:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 10.0 (as of 19-09-2017 - 01:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| oval
via4
|
| accepted | 2009-11-30T04:00:35.147-05:00 | | class | vulnerability | | contributors | | name | Pai Peng | | organization | Hewlett-Packard |
| | definition_extensions | | comment | IBM AIX 5300-07 is installed | | oval | oval:org.mitre.oval:def:5707 |
| comment | IBM AIX 5300-08 is installed | | oval | oval:org.mitre.oval:def:5293 |
| comment | IBM AIX 5300-09 is installed | | oval | oval:org.mitre.oval:def:6306 |
| comment | IBM AIX 6100-00 is installed | | oval | oval:org.mitre.oval:def:5589 |
| comment | IBM AIX 6100-01 is installed | | oval | oval:org.mitre.oval:def:5959 |
| comment | IBM AIX 6100-02 is installed | | oval | oval:org.mitre.oval:def:5685 |
| | description | nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors. | | family | unix | | id | oval:org.mitre.oval:def:6366 | | status | accepted | | submitted | 2009-10-09T14:55:01.000-04:00 | | title | AIX NFSv4 nfs_portmon vulnerability | | version | 42 |
|
| refmap
via4
|
|
| Last major update |
19-09-2017 - 01:29 |
| Published |
01-10-2009 - 15:30 |
| Last modified |
19-09-2017 - 01:29 |
