CVE-2012-4817

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.ascVendor Advisory
http://osvdb.org/85427
http://secunia.com/advisories/50619
http://www.ibm.com/support/docview.wss?uid=isg1IV10327Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV11629Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV12169Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV17855Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV26436Vendor Advisory
http://www.securityfocus.com/bid/55546
http://www.securitytracker.com/id?1027531
https://exchange.xforce.ibmcloud.com/vulnerabilities/78431
http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.ascVendor Advisory
http://osvdb.org/85427
http://secunia.com/advisories/50619
http://www.ibm.com/support/docview.wss?uid=isg1IV10327Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV11629Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV12169Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV17855Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=isg1IV26436Vendor Advisory
http://www.securityfocus.com/bid/55546
http://www.securitytracker.com/id?1027531
https://exchange.xforce.ibmcloud.com/vulnerabilities/78431

Timeline

Published: Sep 14, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-48186.5IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by i CVE-2012-48194.3Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere CVE-2012-48209.3Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR CVE-2012-48219.3Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier CVE-2012-48229.3Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier CVE-2012-48239.3Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR CVE-2012-48245.8Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows remote attackers to re CVE-2012-48254.3Multiple cross-site scripting (XSS) vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow r CVE-2012-48268.5Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 CVE-2012-48294.3IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attacker CVE-2012-48305.0Unspecified vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 through 7.0.0.6 allows remote attackers to obtain users' pe CVE-2012-48321.9Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.