CVE-2009-3516

Published: Oct 1, 2009Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.

Affected (7)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.3.0
Ibm Aix	Version 5.3.7
Ibm Aix	Version 5.3.8
Ibm Aix	Version 6.1.0
Ibm Aix	Version 6.1.1
Ibm Aix	Version 6.1.2
Ibm Aix	Version 6.1

Related CWEs

CWE-255

References (20)

http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc

Source: cve@mitre.org

PatchVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/36545

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2009/2788

Source: cve@mitre.org

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318

Source: cve@mitre.org

http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc