CVE

Id
14827  
CVE No.
CVE-2005-3623  
Status
Candidate  
Description
nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
113621 14827 CVE-2005-3623 MISC:http://lkml.org/lkml/2005/12/23/171  View
113622 14827 CVE-2005-3623 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm  View
113623 14827 CVE-2005-3623 REDHAT:RHSA-2006:0575  View
113624 14827 CVE-2005-3623 URL:http://www.redhat.com/support/errata/RHSA-2006-0575.html  View
113625 14827 CVE-2005-3623 SUSE:SUSE-SA:2006:006  View
113626 14827 CVE-2005-3623 URL:http://www.novell.com/linux/security/advisories/2006_06_kernel.html  View
113627 14827 CVE-2005-3623 SUSE:SUSE-SA:2006:012  View
113628 14827 CVE-2005-3623 URL:http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html  View
113629 14827 CVE-2005-3623 BID:16570  View
113630 14827 CVE-2005-3623 URL:http://www.securityfocus.com/bid/16570  View
113631 14827 CVE-2005-3623 OVAL:oval:org.mitre.oval:def:11707  View
113632 14827 CVE-2005-3623 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11707  View
113633 14827 CVE-2005-3623 SECUNIA:18788  View
113634 14827 CVE-2005-3623 URL:http://secunia.com/advisories/18788  View
113635 14827 CVE-2005-3623 SECUNIA:19038  View
113636 14827 CVE-2005-3623 URL:http://secunia.com/advisories/19038  View
113637 14827 CVE-2005-3623 SECUNIA:21465  View
113638 14827 CVE-2005-3623 URL:http://secunia.com/advisories/21465  View
113639 14827 CVE-2005-3623 SECUNIA:22417  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57806 JVNDB-2006-000002 Xpdf の DCTStream::readMarker() 関数におけるサービス運用妨害 (DoS) の脆弱性 Xpdf には Stream.cc の DCTStream::readMarker() 関数において、不正なファイルを処理した場合に無限ループに陥る脆弱性が存在します。 CVE-2005-3625 14827 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000002.html  View