Description
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 ↗
- http://secunia.com/advisories/35672 ↗
- http://www.vupen.com/english/advisories/2009/1747 ↗
- http://secunia.com/advisories/42550 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 ↗
- http://www.securityfocus.com/bid/35546 ↗
- https://support.avaya.com/css/P8/documents/100058487 ↗
- http://osvdb.org/55519 ↗
- http://www.securitytracker.com/id?1022492 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1 ↗