autofs nodev Mount Option Privilege Escalation Vulnerability
BID:26970
Info
autofs nodev Mount Option Privilege Escalation Vulnerability
| Bugtraq ID: | 26970 |
| Class: | Configuration Error |
| CVE: |
CVE-2007-6285 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 12 2007 12:00AM |
| Updated: | Apr 13 2015 09:32PM |
| Credit: | Tim Baum is credited with discovering this issue. |
| Vulnerable: |
Redhat Fedora 7 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat autofs5 5.0.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 |
| Not Vulnerable: | |
Discussion
autofs nodev Mount Option Privilege Escalation Vulnerability
The 'autofs' utility is prone to a privilege-escalation vulnerability because of a flaw in its default configuration. Filesystems mounted under '/net' using the 'hosts' automount map do not have the 'nodev' mount option enabled by default.
Attackers can leverage this issue to interact with arbitrary system devices. Successful exploits will completely compromise affected computers.
The 'autofs' utility is prone to a privilege-escalation vulnerability because of a flaw in its default configuration. Filesystems mounted under '/net' using the 'hosts' automount map do not have the 'nodev' mount option enabled by default.
Attackers can leverage this issue to interact with arbitrary system devices. Successful exploits will completely compromise affected computers.
Exploit / POC
autofs nodev Mount Option Privilege Escalation Vulnerability
To exploit this issue, an attacker can use readily available networking tools. The attacker would also need to control an NFS server that is accessible to vulnerable computers.
To exploit this issue, an attacker can use readily available networking tools. The attacker would also need to control an NFS server that is accessible to vulnerable computers.
Solution / Fix
autofs nodev Mount Option Privilege Escalation Vulnerability
Solution:
Red Hat has released updates to address this issue. Please see the references for more information.
Solution:
Red Hat has released updates to address this issue. Please see the references for more information.
References
autofs nodev Mount Option Privilege Escalation Vulnerability
References:
References: