Red Hat Security AdvisoryRHSA-2007:0951
nfs-utils-lib security update
Released 2007-10-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) nfs-utils-lib-1.0.8-7.2.z2, nfs-utils-lib-1.0.8-7.2.z2.i386, nfs-utils-lib-1.0.8-7.2.z2.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) nfs-utils-lib-1.0.8-7.2.z2, nfs-utils-lib-1.0.8-7.2.z2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nfs-utils-lib-1.0.8-7.2.z2, nfs-utils-lib-devel-1.0.8-7.2.z2, nfs-utils-lib-devel-1.0.8-7.2.z2.i386
Fixes 2 records
Priority MEDIUM 56
Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration d…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10909 · Published 2007-09-05 · Fixed CWE-119
Priority LOW 28
The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "n…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00341 · Published 2007-09-05 · Fixed
