CVE-2009-2296 Information

Description

The NFSv4 server kernel module in Sun Solaris 10 and OpenSolaris before snv_119 does not properly implement the nfs_portmon setting which allows remote attackers to access shares and read create and modify arbitrary files via unspecified vectors.

Reference

http://osvdb.org/55519 http://secunia.com/advisories/35672 http://secunia.com/advisories/42550 http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 http://www.securityfocus.com/bid/35546 http://www.securitytracker.com/id?1022492 http://www.vupen.com/english/advisories/2009/1747 https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 https://support.avaya.com/css/P8/documents/100058487