CVEvulnerability

CVE-2007-5964

6.9 MEDIUM Published 2007-12-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-12-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-16

Description

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.

Affected configurations

• redhat enterprise linux 5.0

Related

Weakness · not in database (1)

References