Tracker / CVE-2009-1072
CVE-2009-1072
Medium 4.9
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| debian | debian_linux |
| linux | linux_kernel · … → 2.6.28.9 |
| opensuse | opensuse |
| suse | linux_enterprise_desktop |
| suse | linux_enterprise_server |
| vmware | esx |
| vmware | server |
| vmware | vcenter_server |
| vmware | virtualcenter |
| vmware | vma |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.