CVE-2007-5964

Publication date 13 December 2007

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
autofs 7.10 gutsy
Not affected
7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected

Notes

jdstrand

Ubuntu ships autofs 4, and /etc/auto.net contains the nosuid option