Vulnerability Bulletins |
Compromiso root en autofs |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Compromiso Root |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | GNU/Linux |
| Affected software | autofs 5 |
Description |
|
|
Se ha encontrado una vulnerabilidad en autofs en la versión 5. La vulnerabilidad reside en que la entrada para el mapeo de "hosts" no especifica la opción de mount "nosuid" en la configuración instalada por defecto. Un atacante local con el control de un servidor remoto de nfs podría conseguir privilegios de root mediante la creación de un ejecutable con setuid root y con un sistema de archivos exportado a dicho servidor nfs. |
|
Solution |
|
|
Actualización de software Red Hat (RHSA-2007:1128-6) Red Hat Enterprise Linux (v. 5 server) Red Hat Enterprise Linux Desktop (v. 5 client) https://rhn.redhat.com/ Red Hat (RHSA-2007:1129-5) Red Hat Desktop (v. 4) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux WS (v. 4) https://rhn.redhat.com/ Mandriva (MDVSA-2008:009 / MDVSA-2008:009-1) Mandriva Linux 2007 X86 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.0/i586/media/main/updates/autofs-5.0.1-0.rc3.1.2mdv2007.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.0/SRPMS/main/updates/autofs-5.0.1-0.rc3.1.2mdv2007.0.src.rpm X86_64 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.0/x86_64/media/main/updates/autofs-5.0.1-0.rc3.1.2mdv2007.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.0/SRPMS/main/updates/autofs-5.0.1-0.rc3.1.2mdv2007.0.src.rpm Mandriva Linux 2007.1 X86 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/i586/media/main/updates/autofs-5.0.2-8.4mdv2007.1.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/SRPMS/main/updates/autofs-5.0.2-8.4mdv2007.1.src.rpm X86_64 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/x86_64/media/main/updates/autofs-5.0.2-8.4mdv2007.1.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2007.1/SRPMS/main/updates/autofs-5.0.2-8.4mdv2007.1.src.rpm Mandriva Linux 2008.0 X86 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/i586/media/main/updates/autofs-5.0.2-8.4mdv2008.0.i586.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/SRPMS/main/updates/autofs-5.0.2-8.4mdv2008.0.src.rpm X86_64 ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/x86_64/media/main/updates/autofs-5.0.2-8.4mdv2008.0.x86_64.rpm ftp://ftp.cica.es/pub/Linux/Mandrakelinux/official/updates/2008.0/SRPMS/main/updates/autofs-5.0.2-8.4mdv2008.0.src.rpm |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2007-5964 |
| BID | |
Other resources |
|
|
Red Hat Security Advisory (RHSA-2007:1128-6) https://rhn.redhat.com/errata/RHSA-2007-1128.html Red Hat Security Advisory (RHSA-2007:1129-5) https://rhn.redhat.com/errata/RHSA-2007-1129.html Mandriva Security Advisory (MDVSA-2008:009) http://www.mandriva.com/security/advisories?name=MDVSA-2008:009 Mandriva Security Advisory (MDVSA-2008:009-1) http://www.mandriva.com/security/advisories?name=MDVSA-2008:009-1 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-12-13 |
| 1.1 | Aviso emitido por Mandriva (MDVSA-2008:009) | 2008-01-15 |
| 1.2 | Aviso actualizado por Mandriva (MDVSA-2008:009-1) | 2008-01-22 |