Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libnfsidmap: possible privilege escalation

Package(s):

libnfsidmap

CVE #(s):

CVE-2007-4135

Created:

December 7, 2007

Updated:

December 12, 2007

Description:

The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.

Alerts:

Mandriva

MDKSA-2007:240

2007-12-07

(Log in to post comments)