CVE-2007-4135 The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by....
MediumCVSS 6.2
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nfsv4 nfsidmap | <= 0.16.22 | No fix listed |
| debian/libnfsidmap(Debian:11) | < 0.18-0 | 0.18-0 |
References
- 45825 vdb-entry
- 26674 patch third-party-advisory vendor-advisory
- 27043 third-party-advisory vendor-advisory
- MDKSA-2007:240 vendor-advisory
- SUSE-SR:2007:018 vendor-advisory
- RHSA-2007:0951 vendor-advisory
- 26767 vdb-entry
- nfsv4-idmapper-uid-unspecified(36396) vdb-entry
- oval:org.mitre.oval:def:9864 signature vdb-entry
- security-tracker.debian.org vendor-advisory