CVE-2009-1072
Summary
| CVE | CVE-2009-1072 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-03-25 01:30:00 UTC |
| Updated | 2023-11-07 02:03:00 UTC |
| Description | nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option. |
Risk And Classification
Problem Types: CWE-16
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Canonical | Ubuntu Linux | 6.06 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 8.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 8.10 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 9.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 6.06 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 8.04 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 8.10 | All | All | All |
| Operating System | Canonical | Ubuntu Linux | 9.04 | All | All | All |
| Operating System | Debian | Debian Linux | 4.0 | All | All | All |
| Operating System | Debian | Debian Linux | 5.0 | All | All | All |
| Operating System | Debian | Debian Linux | 4.0 | All | All | All |
| Operating System | Debian | Debian Linux | 5.0 | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Opensuse | Opensuse | 10.3 | All | All | All |
| Operating System | Opensuse | Opensuse | 11.0 | All | All | All |
| Operating System | Opensuse | Opensuse | 11.1 | All | All | All |
| Operating System | Opensuse | Opensuse | 10.3 | All | All | All |
| Operating System | Opensuse | Opensuse | 11.0 | All | All | All |
| Operating System | Opensuse | Opensuse | 11.1 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 5.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 5.0 | All | All | All |
| Operating System | Suse | Linux Enterprise Desktop | 10 | sp2 | All | All |
| Operating System | Suse | Linux Enterprise Desktop | 10 | sp2 | All | All |
| Operating System | Suse | Linux Enterprise Server | 10 | sp2 | All | All |
| Operating System | Suse | Linux Enterprise Server | 10 | sp2 | All | All |
| Operating System | Vmware | Esx | 3.0.3 | All | All | All |
| Operating System | Vmware | Esx | 3.5 | All | All | All |
| Operating System | Vmware | Esx | 4.0 | All | All | All |
| Operating System | Vmware | Esx | 3.0.3 | All | All | All |
| Operating System | Vmware | Esx | 3.5 | All | All | All |
| Operating System | Vmware | Esx | 4.0 | All | All | All |
| Application | Vmware | Server | 2.0.0 | All | All | All |
| Application | Vmware | Server | 2.0.0 | All | All | All |
| Application | Vmware | Vcenter Server | 4.0 | - | All | All |
| Application | Vmware | Vcenter Server | 4.0 | - | All | All |
| Application | Vmware | Virtualcenter | 2.0.2 | All | All | All |
| Application | Vmware | Virtualcenter | 2.5 | All | All | All |
| Application | Vmware | Virtualcenter | 2.0.2 | All | All | All |
| Application | Vmware | Virtualcenter | 2.5 | All | All | All |
| Application | Vmware | Vma | 4.0 | All | All | All |
| Application | Vmware | Vma | 4.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20 | SUSE | lists.opensuse.org | Mailing List, Third Party Advisory |
| oss-security - CVE request: kernel: nfsd did not drop CAP_MKNOD for non-root | MLIST | www.openwall.com | Mailing List, Third Party Advisory |
| Linux Kernel nfsd 'CAP_MKNOD' Unauthorized Access Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| SUSE update for kernel - Secunia.com | SECUNIA | secunia.com | Broken Link |
| Gmane Loom | MLIST | thread.gmane.org | Broken Link |
| USN-793-1: Linux kernel vulnerabilities | Ubuntu | UBUNTU | www.ubuntu.com | Third Party Advisory |
| Repository / Oval Repository | OVAL | oval.cisecurity.org | Third Party Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | Third Party Advisory, VDB Entry |
| Ubuntu update for linux and linux-source-2.6.15 - Secunia.com | SECUNIA | secunia.com | Broken Link |
| Security Advisory SA35390 - SUSE update for kernel - Secunia | SECUNIA | secunia.com | Broken Link |
| Linux Kernel nfsd "CAP_MKNOD" Security Bypass - Secunia Advisories - Vulnerability Information - Secunia.com | SECUNIA | secunia.com | Broken Link |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Repository / Oval Repository | OVAL | oval.cisecurity.org | Third Party Advisory |
| [security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20 | SUSE | lists.opensuse.org | Mailing List, Third Party Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Broken Link |
| SUSE update for kernel - Secunia.com | SECUNIA | secunia.com | Broken Link |
| SUSE update for kernel - Secunia.com | SECUNIA | secunia.com | Broken Link |
| [security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20 | SUSE | lists.opensuse.org | Mailing List, Third Party Advisory |
| [security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20 | SUSE | lists.opensuse.org | Mailing List, Third Party Advisory |
| Red Hat update for kernel-rt - Secunia.com | SECUNIA | secunia.com | Broken Link |
| 404: File not found | CONFIRM | www.kernel.org | Broken Link |
| Debian update for linux-2.6 - Secunia Advisories - Vulnerability Information - Secunia.com | SECUNIA | secunia.com | Broken Link |
| Support | REDHAT | www.redhat.com | Broken Link |
| VMSA-2009-0016.1 | CONFIRM | www.vmware.com | Third Party Advisory |
| kernel/git/torvalds/linux.git - Linux kernel source tree | git.kernel.org | ||
| kernel/git/torvalds/linux.git - Linux kernel source tree | CONFIRM | git.kernel.org | Mailing List, Patch, Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Broken Link |
| Linux Kernel Information Disclosure and Security Bypass - Secunia Advisories - Vulnerability Information - Secunia.com | SECUNIA | secunia.com | Broken Link |
| VMware ESX and vMA Update for Multiple Packages - Secunia Advisories - Vulnerability Information - Secunia.com | SECUNIA | secunia.com | Broken Link |
| Debian -- Security Information -- DSA-1800-1 linux-2.6 | DEBIAN | www.debian.org | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2009-09-10 | Tomas Hoger | This issue has been rated as having moderate security impact. It was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG, via https://rhn.redhat.com/errata/RHSA-2009-1132.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1081.html . This issue is not planned to be fixed in Red Hat Enterprise Linux 2.1 and 3, due to these products being in Production 3 of their maintenance life-cycles, where only qualified security errata of important or critical impact are addressed. For further information about Errata Support Policy, visit: http://www.redhat.com/security/updates/errata/ . |
There are currently no legacy QID mappings associated with this CVE.