CVE-2007-5964

Severity

69%

Complexity

34%

Confidentiality

165%

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.

CVSS 2.0 Base Score 6.9. CVSS Attack Vector: local. CVSS Attack Complexity: medium. CVSS Vector: (AV:L/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 17 years ago

2007-12-13 18:46:00

Last updated 7 years ago

2017-09-29 01:29:00

Affected Software

Red Hat Enterprise Linux 5.0

5.0

References

40441

28052

Vendor Advisory

28097

Vendor Advisory

28456

Vendor Advisory

1019087

MDVSA-2008:009

RHSA-2007:1128

RHSA-2007:1129

26841

https://bugzilla.redhat.com/show_bug.cgi?id=409701

https://bugzilla.redhat.com/show_bug.cgi?id=410031

Exploit

oval:org.mitre.oval:def:10158

FEDORA-2007-4469

FEDORA-2007-4532

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.