CVE-2009-3516

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-255

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.ascPatch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496Vendor Advisory
http://www.securityfocus.com/bid/36545Patch
http://www.vupen.com/english/advisories/2009/2788Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318
http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.ascPatch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496Vendor Advisory
http://www.securityfocus.com/bid/36545Patch
http://www.vupen.com/english/advisories/2009/2788Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318

Timeline

Published: Oct 1, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-351710.0nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers CVE-2009-35189.3Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational CVE-2009-35194.9Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause CVE-2009-35208.8Cross-site request forgery (CSRF) vulnerability in the Your_account module in CMSphp 0.21 allows remote attackers to hijack the authenticati CVE-2009-35214.3Multiple cross-site scripting (XSS) vulnerabilities in the Visualization Engine (VE) in IBM Tivoli Composite Application Manager for WebSphe CVE-2009-35227.2Stack-based buffer overflow in aswMon2.sys in avast! Home and Professional for Windows 4.8.1351, and possibly other versions before 4.8.1356 CVE-2009-35236.9aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1) 0xb2d6000c and (2) 0 CVE-2009-35247.2Unspecified vulnerability in ashWsFtr.dll in avast! Home and Professional for Windows before 4.8.1356 has unknown impact and local attack ve CVE-2009-35257.2The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, whi CVE-2009-35276.9Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privi CVE-2009-35286.5SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid pa CVE-2009-35296.8SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid