CVE-2009-0873 Auth bypass in n/a
Remote attackers can bypass access restrictions to read or modify files on Solaris systems using specific NFSv3 security mode combinations.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-0873?
CVE-2009-0873 is a medium-severity authentication bypass vulnerability in Sun Opensolaris, published on 11 Mar 2009. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other."
Weakness: CWE-264
Which versions are affected by CVE-2009-0873?
It affects 3 products.
Products include Sun Opensolaris, Sun Solaris, Sun Sunos.
How do I fix CVE-2009-0873?
No fix has been published for CVE-2009-0873 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2009-0873 being exploited?
There is no known exploitation of CVE-2009-0873 in the wild and no public exploit code.
Other vulnerabilities in Sun Opensolaris
Sources
Also known as GHSA-gq6x-qcc2-xccg.