CVE-2009-0873

Published: Mar 11, 2009Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other."

Affected (182)

Products: Sun: Opensolaris, Sunos, Solaris

3 products

Configuration A

91 vulnerable

Vulnerable Software	Affected Versions
Sun Opensolaris	Version snv_01
Sun Opensolaris	Version snv_02
Sun Opensolaris	Version snv_03
Sun Opensolaris	Version snv_04
Sun Opensolaris	Version snv_05
Sun Opensolaris	Version snv_06
Sun Opensolaris	Version snv_07
Sun Opensolaris	Version snv_08
Sun Opensolaris	Version snv_09
Sun Opensolaris	Version snv_10
Sun Opensolaris	Version snv_20
Sun Opensolaris	Version snv_21
Sun Opensolaris	Version snv_22
Sun Opensolaris	Version snv_23
Sun Opensolaris	Version snv_24
Sun Opensolaris	Version snv_25
Sun Opensolaris	Version snv_26
Sun Opensolaris	Version snv_27
Sun Opensolaris	Version snv_28
Sun Opensolaris	Version snv_29
Sun Opensolaris	Version snv_30
Sun Opensolaris	Version snv_31
Sun Opensolaris	Version snv_32
Sun Opensolaris	Version snv_33
Sun Opensolaris	Version snv_34
Sun Opensolaris	Version snv_35
Sun Opensolaris	Version snv_36
Sun Opensolaris	Version snv_37
Sun Opensolaris	Version snv_38
Sun Opensolaris	Version snv_39
Sun Opensolaris	Version snv_40
Sun Opensolaris	Version snv_41
Sun Opensolaris	Version snv_42
Sun Opensolaris	Version snv_43
Sun Opensolaris	Version snv_44
Sun Opensolaris	Version snv_45
Sun Opensolaris	Version snv_46
Sun Opensolaris	Version snv_47
Sun Opensolaris	Version snv_48
Sun Opensolaris	Version snv_49
Sun Opensolaris	Version snv_50
Sun Opensolaris	Version snv_51
Sun Opensolaris	Version snv_52
Sun Opensolaris	Version snv_53
Sun Opensolaris	Version snv_54
Sun Opensolaris	Version snv_55
Sun Opensolaris	Version snv_56
Sun Opensolaris	Version snv_57
Sun Opensolaris	Version snv_58
Sun Opensolaris	Version snv_59
Sun Opensolaris	Version snv_60
Sun Opensolaris	Version snv_61
Sun Opensolaris	Version snv_62
Sun Opensolaris	Version snv_63
Sun Opensolaris	Version snv_64
Sun Opensolaris	Version snv_65
Sun Opensolaris	Version snv_66
Sun Opensolaris	Version snv_67
Sun Opensolaris	Version snv_68
Sun Opensolaris	Version snv_69
Sun Opensolaris	Version snv_70
Sun Opensolaris	Version snv_71
Sun Opensolaris	Version snv_72
Sun Opensolaris	Version snv_73
Sun Opensolaris	Version snv_74
Sun Opensolaris	Version snv_75
Sun Opensolaris	Version snv_76
Sun Opensolaris	Version snv_77
Sun Opensolaris	Version snv_78
Sun Opensolaris	Version snv_79
Sun Opensolaris	Version snv_80
Sun Opensolaris	Version snv_81
Sun Opensolaris	Version snv_82
Sun Opensolaris	Version snv_83
Sun Opensolaris	Version snv_84
Sun Opensolaris	Version snv_85
Sun Opensolaris	Version snv_86
Sun Opensolaris	Version snv_87
Sun Opensolaris	Version snv_88
Sun Opensolaris	Version snv_89
Sun Opensolaris	Version snv_90
Sun Opensolaris	Version snv_91
Sun Opensolaris	Version snv_92
Sun Opensolaris	Version snv_93
Sun Opensolaris	Version snv_94
Sun Opensolaris	Version snv_95
Sun Opensolaris	Version snv_96
Sun Opensolaris	Version snv_97
Sun Opensolaris	Version snv_98
Sun Opensolaris	Version snv_99
Sun Sunos	Version 5.10

Configuration B

91 vulnerable

Vulnerable Software	Affected Versions
Sun Opensolaris	Version snv_01
Sun Opensolaris	Version snv_02
Sun Opensolaris	Version snv_03
Sun Opensolaris	Version snv_04
Sun Opensolaris	Version snv_05
Sun Opensolaris	Version snv_06
Sun Opensolaris	Version snv_07
Sun Opensolaris	Version snv_08
Sun Opensolaris	Version snv_09
Sun Opensolaris	Version snv_10
Sun Opensolaris	Version snv_20
Sun Opensolaris	Version snv_21
Sun Opensolaris	Version snv_22
Sun Opensolaris	Version snv_23
Sun Opensolaris	Version snv_24
Sun Opensolaris	Version snv_25
Sun Opensolaris	Version snv_26
Sun Opensolaris	Version snv_27
Sun Opensolaris	Version snv_28
Sun Opensolaris	Version snv_29
Sun Opensolaris	Version snv_30
Sun Opensolaris	Version snv_31
Sun Opensolaris	Version snv_32
Sun Opensolaris	Version snv_33
Sun Opensolaris	Version snv_34
Sun Opensolaris	Version snv_35
Sun Opensolaris	Version snv_36
Sun Opensolaris	Version snv_37
Sun Opensolaris	Version snv_38
Sun Opensolaris	Version snv_39
Sun Opensolaris	Version snv_40
Sun Opensolaris	Version snv_41
Sun Opensolaris	Version snv_42
Sun Opensolaris	Version snv_43
Sun Opensolaris	Version snv_44
Sun Opensolaris	Version snv_45
Sun Opensolaris	Version snv_46
Sun Opensolaris	Version snv_47
Sun Opensolaris	Version snv_48
Sun Opensolaris	Version snv_49
Sun Opensolaris	Version snv_50
Sun Opensolaris	Version snv_51
Sun Opensolaris	Version snv_52
Sun Opensolaris	Version snv_53
Sun Opensolaris	Version snv_54
Sun Opensolaris	Version snv_55
Sun Opensolaris	Version snv_56
Sun Opensolaris	Version snv_57
Sun Opensolaris	Version snv_58
Sun Opensolaris	Version snv_59
Sun Opensolaris	Version snv_60
Sun Opensolaris	Version snv_61
Sun Opensolaris	Version snv_62
Sun Opensolaris	Version snv_63
Sun Opensolaris	Version snv_64
Sun Opensolaris	Version snv_65
Sun Opensolaris	Version snv_66
Sun Opensolaris	Version snv_67
Sun Opensolaris	Version snv_68
Sun Opensolaris	Version snv_69
Sun Opensolaris	Version snv_70
Sun Opensolaris	Version snv_71
Sun Opensolaris	Version snv_72
Sun Opensolaris	Version snv_73
Sun Opensolaris	Version snv_74
Sun Opensolaris	Version snv_75
Sun Opensolaris	Version snv_76
Sun Opensolaris	Version snv_77
Sun Opensolaris	Version snv_78
Sun Opensolaris	Version snv_79
Sun Opensolaris	Version snv_80
Sun Opensolaris	Version snv_81
Sun Opensolaris	Version snv_82
Sun Opensolaris	Version snv_83
Sun Opensolaris	Version snv_84
Sun Opensolaris	Version snv_85
Sun Opensolaris	Version snv_86
Sun Opensolaris	Version snv_87
Sun Opensolaris	Version snv_88
Sun Opensolaris	Version snv_89
Sun Opensolaris	Version snv_90
Sun Opensolaris	Version snv_91
Sun Opensolaris	Version snv_92
Sun Opensolaris	Version snv_93
Sun Opensolaris	Version snv_94
Sun Opensolaris	Version snv_95
Sun Opensolaris	Version snv_96
Sun Opensolaris	Version snv_97
Sun Opensolaris	Version snv_98
Sun Opensolaris	Version snv_99
Sun Solaris	Version 10.0