NVD

Id
56266  
Name
CVE-2007-4135  
Description
The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-09-04  
Modified Date
2010-10-18  
Seq
2007-4135  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286576 56266 CVE-2007-4135 oval:org.mitre.oval:def:9864  View
286577 56266 CVE-2007-4135 MDKSA-2007:240  View
286578 56266 CVE-2007-4135 SUSE-SR:2007:018  View
286579 56266 CVE-2007-4135 RHSA-2007:0951  View
286580 56266 CVE-2007-4135 26767  View
286581 56266 CVE-2007-4135 nfsv4-idmapper-uid-unspecified(36396)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52076 JVNDB-2007-000739 NFSv4 ID mapper の getpwnam_r() 関数におけるファイル所有者の取り扱いの問題 NFSv4 ID mapper (nfsidmap) には、username の取り扱いの際、getpwnam_r() 関数からの返り値の取り扱いに不備があり、任意のファイルの所有者を root に変更される問題が存在します。 CVE-2007-4135 27490 CVE-2007-4135 56266 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000739.html 2007-08-31 2007-12-03 View