CVE-2009-3516

CVE-2009-3516 affects IBM AIX: gssd in AIX 5.3.x (up to 5.3.9) and 6.1.x (up to 6.1.2) does not properly handle the NFSv4 Kerberos credential cache, enabling local users to bypass access restrictions on Kerberized NFSv4 shares via unspecified vectors. Impact per CVSS v2 is High (local, no auth, f...

CVE-2009-3516

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors...

CVE-2009-3517

CVE-2009-3517 concerns IBM AIX NFS client/server handling where nfs.ext on AIX 5.3.x (5.3.0–5.3.9) and 6.1.x (6.1.0–6.1.2) does not properly enforce nfs_portmon, allowing remote attackers to bypass access restrictions on NFSv4 shares via unspecified vectors. The root cause is improper use of the ...

CVE-2009-3517

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfsportmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors...

Linux kernel 'O_EXCL' NFSv4特权提升漏洞

Bugraq ID: 36472 CNCAN ID：CNCAN-2009092205 Linux是一款开放源代码的操作系统。 Linux NFSv4处理doopenlookup存在问题，本地攻击者可以利用漏洞以其他用户权限执行任意代码。 目前没有详细漏洞细节提供。 Linux kernel 2.6.19 -rc4 Linux kernel 2.6.19 -rc3 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux...

Linux Kernel O_EXCL NFSv4本地权限提升漏洞

BUGTRAQ ID: 36472 CVE ID: CVE-2009-3286 Linux Kernel是开放源码操作系统Linux所使用的内核。 当OEXCL创建文件失败时，Linux Kernel的NFSv4没有正确地清除inode。这导致以不安全的设置（如setuid位）创建文件，本地用户可以通过执行doopenpermission函数获得权限提升。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://git.kernel.org/linus/af85852d...

Design/Logic Flaw

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

CVE-2009-3286

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

CVE-2009-3286

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

CVE-2009-3286

CVE-2009-3286 affects the Linux kernel 2.6.18 (and possibly other versions) where NFSv4 O_EXCL creates are not properly cleaned up, causing files to be created with insecure settings (e.g., setuid bits) and potentially enabling local privilege escalation. The issue is tied to the do_open_permissi...

CVE-2009-3286

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

RedHat Security Advisory RHSA-2009:1157

The remote host is missing updates announced in advisory RHSA-2009:1157. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. Security fixes: a flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interfa...

Sun Solaris NFS Version 4内核模块本地拒绝服务漏洞

Bugraq ID: 35714 CNCAN ID：CNCAN-2009071704 Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFSv4内核模块存在安全问题，本地攻击者可以利用漏洞使NFSv4客户端崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10.0 Sun OpenSolaris build snv119 Sun OpenSolaris build snv118 Sun OpenSolaris build snv117 Sun OpenSolaris build snv116 Sun...

Design/Logic Flaw

Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv102 through snv119, allows local users to cause a denial of service client panic via vectors involving "file operations."...

CVE-2009-2488

Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv102 through snv119, allows local users to cause a denial of service client panic via vectors involving "file operations."...

CVE-2009-2488

Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv102 through snv119, allows local users to cause a denial of service client panic via vectors involving "file operations."...

CVE-2009-2488

CVE-2009-2488 affects the NFSv4 kernel module in Sun Solaris 10 and OpenSolaris (snv_102–snv_119). The vulnerability is described as unspecified but enables local denial of service (client panic) via “file operations.” Remediation as per connected data includes Solaris updates: patch 141733-04 fo...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix several security issues and various bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel-rt packages contain the Linux kernel, the core of any Lin...

RedHat Security Advisory RHSA-2009:1132

The remote host is missing updates to the Linux kernel announced in advisory RHSA-2009:1132. These updated packages fix the following security issues: a flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interface may be split across...

Solaris内核udp(7p)远程拒绝服务漏洞

BUGTRAQ ID: 35545 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris NFSv4服务器内核模块nfsportmon可调参数中的安全漏洞可能允许某些远程非特权用户获得对共享资源的网络访问，从而允许用户读写访问任意文件。仅在配置为NFSv4服务器的系统上才会出现这个漏洞。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 - snv118 临时解决方法： 在/etc/default/nfs中设置NFSSERVERVERSMAX=3，配置NFS服务器系统不要使用NFSv4。 厂商补...