CVE Vulnerabilities

CVE-2007-4135

Published: Sep 05, 2007 | Modified: Sep 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.2 MEDIUM
AV:L/AC:H/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by root instead of nobody if the file exists on the server but not on the client.

Affected Software

Name Vendor Start Version End Version
Nfsidmap Nfsv4 * 0.16.22 (including)

References