CVE-2009-1630

The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not…

published May 14, 2009

CVSS
—
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00485 · 40.8th percentile
Published
2009-05-14T17:00Z
EPSS history
Timeline
  • 14 MAY 17:00Z
    The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not…
    cvelistv5