PT-2007-5333 · Linux Nfs+1 · Nfsidmap+1

Publicado 2007-09-05 · Atualizado 2017-09-29 · CVE-2007-4135

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions nfsidmap versions prior to 0.17

Description The issue arises from the NFSv4 ID mapper (nfsidmap) not properly handling return values from the getpwnam r function during username lookup. This can lead to incorrect file ownership reporting, where a file is reported as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.

Recommendations For versions prior to 0.17, update to version 0.17 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-4135

RHSA-2007:0951

RHSA-2007_0951

Produtos afetados

Red Hat

Nfsidmap

Referências · 19

• http://osvdb.org/45825 · Nota
• http://secunia.com/advisories/26674 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2007-3999 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9864 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-4135 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09590 · Nota de Segurança
• http://novell.com/linux/security/advisories/2007_18_sr.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2007-0951.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36396 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4135 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-4135 · Aviso do Fabricante
• http://securityfocus.com/bid/26767 · Nota
• https://bdu.fstec.ru/vul/2015-07450 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-07449 · Nota de Segurança
• http://secunia.com/advisories/27043 · Aviso do Fabricante