Description
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.
References
- 262668 vendor-advisory
- 35672 third-party-advisory
- ADV-2009-1747 vdb-entry
- 42550 third-party-advisory
- solaris-nfsportmon-unauth-access(51450) vdb-entry
- 35546 vdb-entry
- https://support.avaya.com/css/P8/documents/100058487
- 55519 vdb-entry
- 1022492 vdb-entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1