CVE-2009-2296

CVE-2009-2296 describes a critical vulnerability in the NFSv4 server kernel module of Sun Solaris 10 and OpenSolaris versions prior to snv_119. This flaw, stemming from improper implementation of the nfs_portmon setting, allows unauthenticated remote attackers to gain full access to shared files, including the ability to read, create, and modify them. With a CVSS score of 10.0, this vulnerability is highly severe, indicating a network-based attack with low complexity and complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.