CVE-2009-0872

The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with…

published March 11, 2009

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the AUTH_NONE and AUTH_SYS security modes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01961 · 80.0th percentile
Published
2009-03-11T14:00Z
EPSS history
Timeline
  • 11 MAR 14:00Z
    The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combination with…
    cvelistv5