CVE-2009-1933

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-05 · updated 2026-06-16
Weakness: CWE-255

Description

Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points and Kerberized NFS shares via unspecified vectors.

Affected products

Sun Opensolaris: through snv_107; through snv_116; snv_01, snv_02, snv_03, snv_04, snv_05, snv_06 (+109)
Sun Solaris: 8, 9, 10

References

http://secunia.com/advisories/35341
http://secunia.com/advisories/35414
http://sunsolve.sun.com/search/document.do?assetkey=1-21-140841-01-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-252787-1
http://support.avaya.com/elmodocs2/security/ASA-2009-210.htm
http://www.securityfocus.com/bid/35205
http://www.vupen.com/english/advisories/2009/1499
http://www.vupen.com/english/advisories/2009/1559
http://secunia.com/advisories/35341
http://secunia.com/advisories/35414
http://sunsolve.sun.com/search/document.do?assetkey=1-21-140841-01-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-252787-1

Get alerted when CVE-2009-1933 or the next vulnerability affects your stack