CVE-2007-0004

{"id": "CVE-2007-0004", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-09-18T19:17:00.000", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=199715", "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfs_permission (mode bits) data rather than an NFS ACCESS call to the server, which allows local client processes to obtain a false success status from open calls that the server would deny, and possibly obtain sensitive information about file permissions on the server, as demonstrated in a root_squash environment. NOTE: it is uncertain whether any scenarios involving this issue cross privilege boundaries."}, {"lang": "es", "value": "La implementaci\u00f3n del cliente NFS en el n\u00facleo de Red Hat Enterprise Linux (RHEL) 3, cuando un sistema de ficheros se monta con la opci\u00f3n noacl, comprueba los permisos para la llamada al sistema open mediante la informaci\u00f3n vfs_permission (bits de modo o mode bits) en lugar de una llamada NFS ACCESS al servidor, lo cual permite a procesos cliente locales obtener un falso estado de \u00e9xito de llamadas a open que el servidor denegar\u00eda, y posiblemente obtener informaci\u00f3n sensible sobre los permisos de fichero en el servidor, como se ha demostrado en un entorno root_squash. NOTA: no est\u00e1 claro si cualquier escenario involucrando este problema cruzan los l\u00edmites de la seguridad."}], "lastModified": "2008-09-05T21:16:46.527", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}