logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2009-1630

Description

The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.


Affected Software


CPE Name Name Version
linux:linux_kernel linux linux kernel 2.6.29.3
opensuse:opensuse opensuse 11.1
opensuse:opensuse opensuse 11.0
debian:debian_linux debian debian linux 5.0
debian:debian_linux debian debian linux 4.0
canonical:ubuntu_linux canonical ubuntu linux 9.04
canonical:ubuntu_linux canonical ubuntu linux 8.10
canonical:ubuntu_linux canonical ubuntu linux 8.04
canonical:ubuntu_linux canonical ubuntu linux 6.06
vmware:esx vmware esx 3.5
vmware:esx vmware esx 4.0
vmware:esx vmware esx 2.5.5
vmware:esx vmware esx 3.0.3

Related