CVE-2009-3516: High severity ibm aix vulnerability
Published Oct 1, 2009
·Updated
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.
Affected Software
7 affected components
IBM AIX=5.3.8
IBM AIX=5.3.7
IBM AIX=6.1.0
IBM AIX=6.1.1
IBM AIX=6.1
IBM AIX=6.1.2
IBM AIX=5.3.0
Remediation
Patch Available
Event History
Oct 1, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3516?
CVE-2009-3516 is considered to have a high severity due to its potential to allow local users to bypass access restrictions.
2
How do I fix CVE-2009-3516?
To fix CVE-2009-3516, you should apply the latest security updates and patches provided by IBM for affected versions of AIX.
3
Which versions of AIX are affected by CVE-2009-3516?
CVE-2009-3516 affects IBM AIX versions 5.3.0 through 5.3.9 and 6.1.0 through 6.1.2.
4
Can CVE-2009-3516 be exploited remotely?
CVE-2009-3516 is not exploitable remotely as it requires local user access to the system.
5
What types of systems are impacted by CVE-2009-3516?
CVE-2009-3516 impacts systems running IBM AIX with Kerberized NFSv4 shares configured.