CVE-2009-0872 Auth bypass in n/a
Remote attackers can bypass access restrictions to read or modify files on Solaris NFS servers configured with mixed security modes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-0872?
CVE-2009-0872 is a medium-severity authentication bypass vulnerability in Sun Opensolaris, published on 11 Mar 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes.
Weakness: CWE-264
Which versions are affected by CVE-2009-0872?
It affects 2 products.
Products include Sun Opensolaris, Sun Solaris.
How do I fix CVE-2009-0872?
No fix has been published for CVE-2009-0872 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2009-0872 being exploited?
There is no known exploitation of CVE-2009-0872 in the wild and no public exploit code.
Other vulnerabilities in Sun Opensolaris
Sources
Also known as GHSA-3cqq-q3c4-9jg6.