nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass intended access restrictions for NFSv4 shares via unspecified vectors.

The remote host is missing AIX PTF U825202, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U825103, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U825042, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U824054, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U823931, which is related to the security of the package bos.net.nfs.client.

The remote host is missing AIX PTF U823848, which is related to the security of the package bos.net.nfs.client.

ID	Name	Product	Family	Severity
39706	AIX 5.3 TL 9 : bos.net.nfs.client (U825202)	Nessus	AIX Local Security Checks	critical
39666	AIX 5.3 TL 8 : bos.net.nfs.client (U825103)	Nessus	AIX Local Security Checks	critical
39637	AIX 5.3 TL 7 : bos.net.nfs.client (U825042)	Nessus	AIX Local Security Checks	critical
39136	AIX 6.1 TL 2 : bos.net.nfs.client (U824054)	Nessus	AIX Local Security Checks	critical
39079	AIX 6.1 TL 1 : bos.net.nfs.client (U823931)	Nessus	AIX Local Security Checks	critical
39026	AIX 6.1 : bos.net.nfs.client (U823848)	Nessus	AIX Local Security Checks	critical

Detections

Analytics

CVE-2009-3517

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical