CVE-2007-0004: Low severity red hat enterprise linux vulnerability

Published Sep 18, 2007

Updated

The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission (mode bits) data rather than an NFS ACCESS call to the server, which allows local client processes to obtain a false success status from open calls that the server would deny, and possibly obtain sensitive information about file permissions on the server, as demonstrated in a rootsquash environment. NOTE: it is uncertain whether any scenarios involving this issue cross privilege boundaries.

Affected Software

1 affected component

redhat Enterprise Linux=3.0

Event History

Sep 18, 2007

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0004?

CVE-2007-0004 is classified as a moderate severity vulnerability.

How do I fix CVE-2007-0004?

To mitigate CVE-2007-0004, ensure that filesystems are mounted without the noacl option.

What systems are affected by CVE-2007-0004?

CVE-2007-0004 affects Red Hat Enterprise Linux version 3.0.

What type of vulnerability is CVE-2007-0004?

CVE-2007-0004 is a local privilege escalation vulnerability in the NFS client implementation.

What can attackers achieve with CVE-2007-0004?

Attackers can bypass permission checks on NFS mounted filesystems, potentially leading to unauthorized access.