CVE-2007-0004

The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks permissions for…

published September 18, 2007

CVSS
—
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfs_permission (mode bits) data rather than an NFS ACCESS call to the server, which allows local client processes to obtain a false success status from open calls that the server would deny, and possibly obtain sensitive information about file permissions on the server, as demonstrated in a root_squash environment. NOTE: it is uncertain whether any scenarios involving this issue cross privilege boundaries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.4th percentile
Published
2007-09-18T19:00Z
EPSS history
Timeline
  • 18 SEP 19:00Z
    The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks permissions for…
    cvelistv5