Unscored severity · published Oct 1, 2009
CVE-2009-3516
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access…
–
CVSS
0.4%
EPSS
No
On KEV
Description
gssd in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly handle the NFSv4 Kerberos credential cache, which allows local users to bypass intended access restrictions for Kerberized NFSv4 shares via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.3.0; 5.3.7; 5.3.8; 6.1; 6.1.0; 6.1.1; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3516
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3516
Patch
http://aix.software.ibm.com/aix/efixes/security/nfs4_advisory.asc
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49024
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49096
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ49278
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50399
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ50444
More from Aix
10.0
CVE-2024-56346
IBM AIX command execution
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS