Technical Description

Two vulnerabilities have been identified in IBM AIX, which could be exploited by attackers or malicious users to bypass security restrictions.

The first issue is caused due to the "nfs_portmon" tunable not being utilized correctly in NFSv4, which could allow a remote attacker to access network shares protected by "nfs_portmon" without authorization.

The second vulnerability is caused by an error within the handling of the NFSv4 Kerberos credential cache, which could allow a local attacker to access Kerberized network shares without authorization.

Affected Products

IBM AIX version 5.3
IBM AIX version 6.1

Solution

Apply fix :
http://aix.software.ibm.com/aix/efixes/security/nfs4_fix.tar

IBM AIX 5.3.7 - Apply APAR IZ50496 (available with SP9)
IBM AIX 5.3.8 - Apply APAR IZ50444 (available with SP7)
IBM AIX 5.3.9 - Apply APAR IZ50399 (available with SP4)
IBM AIX 6.1.0 - Apply APAR IZ49278 (available with SP9)
IBM AIX 6.1.1 - Apply APAR IZ49096 (available with SP5)
IBM AIX 6.1.2 - Apply APAR IZ49024 (available with SP4)

References

http://www.vupen.com/english/advisories/2009/2788
http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc

Credits

Vulnerabilities reported by Anton Lundin.

ChangeLog

2009-09-29 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.