NVD

Id
17667  
Name
CVE-2016-1237  
Description
nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-06-29  
Modified Date
2016-11-28  
Seq
2016-1237  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97368 17667 CVE-2016-1237 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=999653786df6954a31044528ac3f7a5dadca08f4  View
97369 17667 CVE-2016-1237 DSA-3607  View
97370 17667 CVE-2016-1237 [oss-security] 20160625 Linux CVE-2016-1237: nfsd: any user can set a file"s ACL over NFS and grant access to it  View
97371 17667 CVE-2016-1237 91456  View
97372 17667 CVE-2016-1237 USN-3053-1  View
97373 17667 CVE-2016-1237 USN-3070-1  View
97374 17667 CVE-2016-1237 USN-3070-2  View
97375 17667 CVE-2016-1237 USN-3070-3  View
97376 17667 CVE-2016-1237 USN-3070-4  View
97377 17667 CVE-2016-1237 https://bugzilla.redhat.com/show_bug.cgi?id=1350845  View
97378 17667 CVE-2016-1237 https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2584 JVNDB-2016-003357 Linux Kernel の nfsd におけるファイルパーミッションの制限を回避される脆弱性 Linux Kernel の nfsd には、nfs2acl.c、nfs3acl.c、および nfs4acl.c に関する処理に不備があるため、ファイルパーミッションの制限を回避される脆弱性が存在します。 CVE-2016-1237 87743 CVE-2016-1237 17667 4.9 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003357.html 2016-06-23 2016-06-30 View