CVE-2009-0873

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other."

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/52560
http://secunia.com/advisories/34225Vendor Advisory
http://secunia.com/advisories/34435
http://securitytracker.com/id?1021832Exploit
http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1Patch, Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm
http://www.securityfocus.com/bid/34062Exploit
http://www.vupen.com/english/advisories/2009/0657Vendor Advisory
http://www.vupen.com/english/advisories/2009/0814
https://exchange.xforce.ibmcloud.com/vulnerabilities/49171
http://osvdb.org/52560
http://secunia.com/advisories/34225Vendor Advisory
http://secunia.com/advisories/34435
http://securitytracker.com/id?1021832Exploit
http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1Patch, Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm
http://www.securityfocus.com/bid/34062Exploit
http://www.vupen.com/english/advisories/2009/0657Vendor Advisory
http://www.vupen.com/english/advisories/2009/0814
https://exchange.xforce.ibmcloud.com/vulnerabilities/49171

Timeline

Published: Mar 11, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-08744.9Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allow CVE-2009-08756.9Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause CVE-2009-08766.9Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hard CVE-2009-08774.3Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web CVE-2009-08785.0The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (mem CVE-2009-08795.0The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service (daemon crash)CVE-2009-08806.8Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to loa CVE-2009-08817.5SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands via the id paramete CVE-2009-08827.5Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to sh CVE-2009-08836.8SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitra CVE-2009-08844.3Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SS CVE-2009-08859.3Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a denial of service (ap