NVD

Id
48382  
Name
CVE-2009-1072  
Description
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-07  
Published
2009-03-24  
Modified Date
2012-03-19  
Seq
2009-1072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243277 48382 CVE-2009-1072 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=76a67ec6fb79ff3570dcb5342142c16098299911  View
243278 48382 CVE-2009-1072 SUSE-SA:2009:021  View
243279 48382 CVE-2009-1072 SUSE-SA:2009:028  View
243280 48382 CVE-2009-1072 SUSE-SA:2009:030  View
243281 48382 CVE-2009-1072 SUSE-SA:2009:031  View
243282 48382 CVE-2009-1072 oval:org.mitre.oval:def:10314  View
243283 48382 CVE-2009-1072 oval:org.mitre.oval:def:8382  View
243284 48382 CVE-2009-1072 [linux-kernel] 20090311 VFS, NFS security bug? Should CAP_MKNOD and CAP_LINUX_IMMUTABLE be added to CAP_FS_MASK?  View
243285 48382 CVE-2009-1072 DSA-1800  View
243286 48382 CVE-2009-1072 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9  View
243287 48382 CVE-2009-1072 [oss-security] 20090323 CVE request: kernel: nfsd did not drop CAP_MKNOD for non-root  View
243288 48382 CVE-2009-1072 RHSA-2009:1081  View
243289 48382 CVE-2009-1072 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
243290 48382 CVE-2009-1072 34205  View
243291 48382 CVE-2009-1072 USN-793-1  View
243292 48382 CVE-2009-1072 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
243293 48382 CVE-2009-1072 ADV-2009-0802  View
243294 48382 CVE-2009-1072 ADV-2009-3316  View
243295 48382 CVE-2009-1072 linux-kernel-capmknod-security-bypass(49356)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40833 JVNDB-2009-001839 Linux kernel の nfsd におけるデバイスノードを作成される脆弱性 Linux kernel の nfsd には、スレッド内のユーザリクエストを処理する前に CAP_MKNOD ケーパビリティを削除しないため、デバイスノードを作成される脆弱性が存在します。 CVE-2009-1072 38503 CVE-2009-1072 48382 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001839.html 2009-03-25 2009-08-04 View