RHSA-2007:0951: Important: nfs-utils-lib security update
The nfs-utils-lib package contains support libraries that are needed by thecommands and daemons of the nfs-utils package.The updated nfs-utils package fixes the following vulnerabilities:Tenable Network Security discovered a stack buffer overflow flaw in the RPClibrary used by nfs-utils-lib. A remote unauthenticated attacker who canaccess an application linked against nfs-utils-lib could trigger this flawand cause the application to crash. On Red Hat Enterprise Linux 5 it is notpossible to exploit this flaw to run arbitrary code as the overflow isblocked by FORTIFYSOURCE. (CVE-2007-3999)Tony Ernst from SGI has discovered a flaw in the way nfsidmap maps NFSv4unknown uids. If an unknown user ID is encountered on an NFSv4 mountedfilesystem, the files will default to being owned by 'root' rather than'nobody'. (CVE-2007-4135)Users of nfs-utils-lib are advised to upgrade to this updated package,which contains backported patches to resolve these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:0951?
The severity of RHSA-2007:0951 is classified as important.
How do I fix RHSA-2007:0951?
To fix RHSA-2007:0951, update the nfs-utils package to the latest version available.
What vulnerabilities are addressed in RHSA-2007:0951?
RHSA-2007:0951 addresses a stack buffer overflow flaw in the RPC library.
Who discovered the vulnerabilities fixed by RHSA-2007:0951?
The vulnerabilities fixed by RHSA-2007:0951 were discovered by Tenable Network Security.
What package is affected by RHSA-2007:0951?
The nfs-utils-lib package, which supports the nfs-utils package, is affected by RHSA-2007:0951.