CVEvulnerability

CVE-2007-4135

6.2 MEDIUM Published 2007-09-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-09-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C

Description

The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.

Affected configurations

• nfsv4 nfsidmap (<= 0.16.22)

References