Sun Solaris Network File System Version 4 (NFSv4) Unauthorized Network Access Vulnerability

Bugtraq ID:	35546
Class:	Configuration Error
CVE:	CVE-2009-2296
Remote:	Yes
Local:	No
Published:	Jun 30 2009 12:00AM
Updated:	Jul 31 2009 08:05PM
Credit:	Anton Lundin
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10 Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Nortel Networks Self-Service Peri Workstation 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service - CCSS7 0
Not Vulnerable:	Sun OpenSolaris build snv_119

Sun Solaris Network File System Version 4 (NFSv4) Unauthorized Network Access Vulnerability

Sun Solaris Network File System Version 4 (NFSv4) 'nfs_portmon' tunable is prone to a vulnerability that can allow an attacker to gain unauthorized access to network resources, which may help in other attacks.

This issue affects Solaris 10 and OpenSolaris based on builds snv_01 through snv_118.

Sun Solaris Network File System Version 4 (NFSv4) Unauthorized Network Access Vulnerability

Attackers can use standard tools to exploit this issue.

Sun Solaris Network File System Version 4 (NFSv4) Unauthorized Network Access Vulnerability

Solution:
Updates are available. Please see the references for details.


Sun Solaris 10

• Sun 139991-03
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -139991-03-1

Sun Solaris 10_x86

• Sun 140109-03
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -140109-03-1

Sun Solaris Network File System Version 4 (NFSv4) Unauthorized Network Access Vulnerability

References:

• 262668 Security Vulnerability in the Solaris Network File System (Sun)
  
• Nortel response to Sun Alerts 256788 and 262668 on Solaris 10 Potential Vulnerab (Nortel Networks)