{"api_version":"1","generated_at":"2026-07-23T11:20:32+00:00","cve":"CVE-2009-1630","urls":{"html":"https://cve.report/CVE-2009-1630","api":"https://cve.report/api/cve/CVE-2009-1630.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-1630","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-1630"},"summary":{"title":"CVE-2009-1630","description":"The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-05-14 17:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.4","severity":"","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/3316","name":"http://www.vupen.com/english/advisories/2009/3316","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35656","name":"http://secunia.com/advisories/35656","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Ubuntu update for linux and linux-source-2.6.15 - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/36327","name":"http://secunia.com/advisories/36327","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Debian update for linux-2.6 - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/34934","name":"http://www.securityfocus.com/bid/34934","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Linux Kernel NFS 'MAY_EXEC' Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131","name":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"title":"Bug 131 – [Patch] Incomplete ACL checking in case of atomic OPEN","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Support / Security / Advisories /  / MDVSA-2009:148 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-793-1","name":"http://www.ubuntu.com/usn/usn-793-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"USN-793-1: Linux kernel vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://article.gmane.org/gmane.linux.nfs/26592","name":"http://article.gmane.org/gmane.linux.nfs/26592","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Gmane -- Mail To News And Back Again","mime":"text/x-diff","httpstatus":"522","archivestatus":"200"},{"url":"http://secunia.com/advisories/35847","name":"http://secunia.com/advisories/35847","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Red Hat update for kernel-rt - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35394","name":"http://secunia.com/advisories/35394","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"SUSE update for kernel - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html","name":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","name":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://secunia.com/advisories/36051","name":"http://secunia.com/advisories/36051","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Debian update for linux-2.6.24 - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/37471","name":"http://secunia.com/advisories/37471","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"VMware ESX and vMA Update for Multiple Packages - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","name":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500297","name":"https://bugzilla.redhat.com/show_bug.cgi?id=500297","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"],"title":"Bug 500297 – CVE-2009-1630 kernel: nfs: fix NFS v4 client handling of MAY_EXEC in nfs_permission","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2009/dsa-1844","name":"http://www.debian.org/security/2009/dsa-1844","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-1844-1 linux-2.6.24","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","name":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","name":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"title":"[security-announce] SUSE Security Announcement: Linux Kernel (SUSE-SA:20","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2009/dsa-1865","name":"http://www.debian.org/security/2009/dsa-1865","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-1865-1 linux-2.6","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Support / Security / Advisories /  / MDVSA-2009:135 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","name":"http://www.securityfocus.com/archive/1/505254/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html","name":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://secunia.com/advisories/35298","name":"http://secunia.com/advisories/35298","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Debian update for linux-2.6 - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/13/2","name":"http://www.openwall.com/lists/oss-security/2009/05/13/2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"],"title":"oss-security - CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC\n in nfs_permission","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","name":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"VMSA-2009-0016.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35106","name":"http://secunia.com/advisories/35106","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Linux Kernel NFSv4 \"MAY_EXEC\" Security Bypass - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","name":"http://www.redhat.com/support/errata/RHSA-2009-1157.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/1331","name":"http://www.vupen.com/english/advisories/2009/1331","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2009/dsa-1809","name":"http://www.debian.org/security/2009/dsa-1809","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-1809-1 linux-2.6","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1630","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1630","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"6.06","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"8.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"8.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"9.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"2.6.29.3","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"opensuse","cpe5":"opensuse","cpe6":"11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"opensuse","cpe5":"opensuse","cpe6":"11.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"2.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"3.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1630","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"vmware","cpe5":"esx","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2009-1630","organization":"Red Hat","lastmodified":"2009-09-10","contributor":"Tomas Hoger","statementText":"This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, and 3. It was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1132.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1157.html .","cve_year":"2009","cve_id":"1630","crc32":"4ceec594"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T05:20:34.608Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"MDVSA-2009:135","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135"},{"name":"DSA-1865","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2009/dsa-1865"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111"},{"name":"[linux-nfs] 20090509 [NFS] [PATCH] nfs: Fix NFS v4 client handling of MAY_EXEC in nfs_permission.","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://article.gmane.org/gmane.linux.nfs/26592"},{"name":"34934","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/34934"},{"name":"37471","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/37471"},{"name":"[nfsv4] 20061116 Status of execute permissions in NFSv4 ACLs ?","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html"},{"name":"[oss-security] 20090513 CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2009/05/13/2"},{"name":"MDVSA-2009:148","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148"},{"name":"35656","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35656"},{"name":"oval:org.mitre.oval:def:9990","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990"},{"name":"DSA-1844","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2009/dsa-1844"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html"},{"name":"ADV-2009-1331","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/1331"},{"name":"RHSA-2009:1157","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500297"},{"name":"35106","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35106"},{"name":"20090724 rPSA-2009-0111-1 kernel","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded"},{"name":"20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded"},{"name":"36051","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36051"},{"name":"35298","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35298"},{"name":"36327","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36327"},{"name":"oval:org.mitre.oval:def:8543","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543"},{"name":"SUSE-SA:2009:031","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131"},{"name":"USN-793-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/usn-793-1"},{"name":"[nfsv4] 20061117 [Patch] Re: Status of execute permissions in NFSv4 ACLs ?","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html"},{"name":"SUSE-SA:2009:038","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html"},{"name":"ADV-2009-3316","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/3316"},{"name":"35394","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35394"},{"name":"DSA-1809","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2009/dsa-1809"},{"name":"35847","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35847"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-05-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"MDVSA-2009:135","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135"},{"name":"DSA-1865","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2009/dsa-1865"},{"tags":["x_refsource_CONFIRM"],"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111"},{"name":"[linux-nfs] 20090509 [NFS] [PATCH] nfs: Fix NFS v4 client handling of MAY_EXEC in nfs_permission.","tags":["mailing-list","x_refsource_MLIST"],"url":"http://article.gmane.org/gmane.linux.nfs/26592"},{"name":"34934","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/34934"},{"name":"37471","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/37471"},{"name":"[nfsv4] 20061116 Status of execute permissions in NFSv4 ACLs ?","tags":["mailing-list","x_refsource_MLIST"],"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html"},{"name":"[oss-security] 20090513 CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2009/05/13/2"},{"name":"MDVSA-2009:148","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148"},{"name":"35656","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35656"},{"name":"oval:org.mitre.oval:def:9990","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990"},{"name":"DSA-1844","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2009/dsa-1844"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html"},{"name":"ADV-2009-1331","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/1331"},{"name":"RHSA-2009:1157","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500297"},{"name":"35106","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35106"},{"name":"20090724 rPSA-2009-0111-1 kernel","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded"},{"name":"20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded"},{"name":"36051","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36051"},{"name":"35298","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35298"},{"name":"36327","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36327"},{"name":"oval:org.mitre.oval:def:8543","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543"},{"name":"SUSE-SA:2009:031","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131"},{"name":"USN-793-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/usn-793-1"},{"name":"[nfsv4] 20061117 [Patch] Re: Status of execute permissions in NFSv4 ACLs ?","tags":["mailing-list","x_refsource_MLIST"],"url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html"},{"name":"SUSE-SA:2009:038","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html"},{"name":"ADV-2009-3316","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/3316"},{"name":"35394","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35394"},{"name":"DSA-1809","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2009/dsa-1809"},{"name":"35847","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35847"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-1630","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"MDVSA-2009:135","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:135"},{"name":"DSA-1865","refsource":"DEBIAN","url":"http://www.debian.org/security/2009/dsa-1865"},{"name":"http://wiki.rpath.com/Advisories:rPSA-2009-0111","refsource":"CONFIRM","url":"http://wiki.rpath.com/Advisories:rPSA-2009-0111"},{"name":"[linux-nfs] 20090509 [NFS] [PATCH] nfs: Fix NFS v4 client handling of MAY_EXEC in nfs_permission.","refsource":"MLIST","url":"http://article.gmane.org/gmane.linux.nfs/26592"},{"name":"34934","refsource":"BID","url":"http://www.securityfocus.com/bid/34934"},{"name":"37471","refsource":"SECUNIA","url":"http://secunia.com/advisories/37471"},{"name":"[nfsv4] 20061116 Status of execute permissions in NFSv4 ACLs ?","refsource":"MLIST","url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html"},{"name":"[oss-security] 20090513 CVE request: kernel: problem with NFS v4 client handling of MAY_EXEC in nfs_permission","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2009/05/13/2"},{"name":"MDVSA-2009:148","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:148"},{"name":"35656","refsource":"SECUNIA","url":"http://secunia.com/advisories/35656"},{"name":"oval:org.mitre.oval:def:9990","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990"},{"name":"DSA-1844","refsource":"DEBIAN","url":"http://www.debian.org/security/2009/dsa-1844"},{"name":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html"},{"name":"ADV-2009-1331","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/1331"},{"name":"RHSA-2009:1157","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2009-1157.html"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=500297","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=500297"},{"name":"35106","refsource":"SECUNIA","url":"http://secunia.com/advisories/35106"},{"name":"20090724 rPSA-2009-0111-1 kernel","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/505254/100/0/threaded"},{"name":"20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded"},{"name":"36051","refsource":"SECUNIA","url":"http://secunia.com/advisories/36051"},{"name":"35298","refsource":"SECUNIA","url":"http://secunia.com/advisories/35298"},{"name":"36327","refsource":"SECUNIA","url":"http://secunia.com/advisories/36327"},{"name":"oval:org.mitre.oval:def:8543","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543"},{"name":"SUSE-SA:2009:031","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html"},{"name":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131","refsource":"CONFIRM","url":"http://bugzilla.linux-nfs.org/show_bug.cgi?id=131"},{"name":"USN-793-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/usn-793-1"},{"name":"[nfsv4] 20061117 [Patch] Re: Status of execute permissions in NFSv4 ACLs ?","refsource":"MLIST","url":"http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html"},{"name":"SUSE-SA:2009:038","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html"},{"name":"ADV-2009-3316","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/3316"},{"name":"35394","refsource":"SECUNIA","url":"http://secunia.com/advisories/35394"},{"name":"DSA-1809","refsource":"DEBIAN","url":"http://www.debian.org/security/2009/dsa-1809"},{"name":"35847","refsource":"SECUNIA","url":"http://secunia.com/advisories/35847"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-1630","datePublished":"2009-05-14T17:00:00.000Z","dateReserved":"2009-05-14T00:00:00.000Z","dateUpdated":"2024-08-07T05:20:34.608Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-05-14 17:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.29.3","matchCriteriaId":"F8F01798-4A0A-405B-A70E-C858868A49E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"C0507E91-567A-41D6-A7E5-5088A39F75FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"ECFD8D25-7FDF-48DF-8728-5875C44FFB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"902BA958-06AA-4EDF-9F9E-1030083EA361"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BFF29100-E124-4416-95CF-18B4246D43F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BC337BB7-9A45-4406-A783-851F279130EE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"1630","Ordinal":"1","Title":"CVE-2009-1630","CVE":"CVE-2009-1630","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"1630","Ordinal":"1","NoteData":"The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.","Type":"Description","Title":"CVE-2009-1630"},{"CveYear":"2009","CveId":"1630","Ordinal":"2","NoteData":"2009-05-14","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"1630","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}