CVE-2009-0873

The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes…

published March 11, 2009

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01961 · 80.0th percentile
Published
2009-03-11T14:00Z
EPSS history
Timeline
  • 11 MAR 14:00Z
    The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes…
    cvelistv5