gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.

The remote host is missing AIX PTF U825202, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U825103, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U825042, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U824054, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U823931, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U823848, which is related to the security of the package bos.net.nfs.client.

ID	Name	Product	Family	Severity
39706	AIX 5.3 TL 9 : bos.net.nfs.client (U825202)	Nessus	AIX Local Security Checks	critical
39666	AIX 5.3 TL 8 : bos.net.nfs.client (U825103)	Nessus	AIX Local Security Checks	critical
39637	AIX 5.3 TL 7 : bos.net.nfs.client (U825042)	Nessus	AIX Local Security Checks	critical
39136	AIX 6.1 TL 2 : bos.net.nfs.client (U824054)	Nessus	AIX Local Security Checks	critical
39079	AIX 6.1 TL 1 : bos.net.nfs.client (U823931)	Nessus	AIX Local Security Checks	critical
39026	AIX 6.1 : bos.net.nfs.client (U823848)	Nessus	AIX Local Security Checks	critical

Detections

Analytics

CVE-2009-3516

high

Tenable Plugins

critical

critical

critical

critical

critical

critical