Description
nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors.
References
- ADV-2009-2788 vdb-entry
- IZ50496 vendor-advisory
- oval:org.mitre.oval:def:6366 vdb-entry signature
- IZ50444 vendor-advisory
- IZ50399 vendor-advisory
- IZ49278 vendor-advisory
- IZ49096 vendor-advisory
- IZ49024 vendor-advisory
- http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc
- 36544 vdb-entry