CVE-2009-1630

Linux Kernel < 2.6.29.3 - Access Control

Title source: rule

Description

The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.

References (32)

[Exploit] http://article.gmane.org/gmane.linux.nfs/26592

[Issue Tracking, Patch, Third Party Advisory] http://bugzilla.linux-nfs.org/show_bug.cgi?id=131

[Broken Link] http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html

[Broken Link] http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html

[Broken Link] http://secunia.com/advisories/35106

[Broken Link] http://secunia.com/advisories/35298

[Broken Link] http://secunia.com/advisories/35394

[Broken Link] http://secunia.com/advisories/35656

[Broken Link] http://secunia.com/advisories/35847

[Broken Link] http://secunia.com/advisories/36051

[Broken Link] http://secunia.com/advisories/36327

[Broken Link] http://secunia.com/advisories/37471

[Broken Link] http://wiki.rpath.com/Advisories:rPSA-2009-0111

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1809

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1844

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1865

[Broken Link] http://www.mandriva.com/security/advisories?name=MDVSA-2009:135

[Broken Link] http://www.mandriva.com/security/advisories?name=MDVSA-2009:148

... and 12 more

Scores

EPSS 0.0011

EPSS Percentile 29.2%

Classification

CWE

CWE-264

Status draft

Affected Products (13)

linux/linux_kernel < 2.6.29.3

opensuse/opensuse

opensuse/opensuse

debian/debian_linux

debian/debian_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

canonical/ubuntu_linux

vmware/esx

vmware/esx

vmware/esx

vmware/esx

Timeline

Published May 14, 2009

Tracked Since Feb 18, 2026