CVE-2024-39916: NFS server misconfiguration allows file access outside the exported directory
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. There is a security issue with the NFS configuration in /etc/exports generated by the installer that allows an attacker to modify files outside the export in the default installation. The exports have the nosubtreecheck option. The nosubtreecheck option means that if a client performs a file operation, the server will only check if the requested file is on the correct filesystem, not if it is in the correct directory. This enables modifying files in /images, accessing other files on the same filesystem, and accessing files on other filesystems. This vulnerability is fixed in 1.5.10.30.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39916?
The severity of CVE-2024-39916 is classified as high due to the potential for unauthorized file modification outside the intended directories.
How do I fix CVE-2024-39916?
To fix CVE-2024-39916, review and update the NFS configuration in /etc/exports to restrict access as necessary.
What software versions are affected by CVE-2024-39916?
CVE-2024-39916 affects Fogproject version 1.5.10 and earlier.
What type of vulnerability is CVE-2024-39916?
CVE-2024-39916 is a configuration vulnerability in the NFS settings that can lead to unauthorized access.
Can CVE-2024-39916 be exploited remotely?
Yes, CVE-2024-39916 can potentially be exploited remotely due to the misconfiguration in NFS exports allowing external access.