CVE-2009-3516

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-10-01 · updated 2026-06-16
Weakness: CWE-255

Description

gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.

Affected products

IBM AIX: 5.3.0, 5.3.7, 5.3.8, 6.1, 6.1.0, 6.1.1 (+1)

References

http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50496
http://www.securityfocus.com/bid/36545
http://www.vupen.com/english/advisories/2009/2788
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6318
http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024

Get alerted when CVE-2009-3516 or the next vulnerability affects your stack