CVE-2009-3517

Published: Oct 1, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors.

Affected (7)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.3.0
Ibm Aix	Version 5.3.7
Ibm Aix	Version 5.3.8
Ibm Aix	Version 6.1.0
Ibm Aix	Version 6.1.1
Ibm Aix	Version 6.1.2
Ibm Aix	Version 6.1

References (20)

http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc

Source: cve@mitre.org

PatchVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278

Source: cve@mitre.org

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/36544

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2009/2788

Source: cve@mitre.org

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6366

Source: cve@mitre.org

http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc