Red Hat Security AdvisoryRHSA-2007:1129
autofs5 security update
Released 2007-12-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 autofs5-1:5.0.1-0.rc2.55.el4_6.1, autofs5-1:5.0.1-0.rc2.55.el4_6.1.i386, autofs5-1:5.0.1-0.rc2.55.el4_6.1.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 autofs5-1:5.0.1-0.rc2.55.el4_6.1, autofs5-1:5.0.1-0.rc2.55.el4_6.1.i386
- Red Hat Enterprise Linux ES version 4 autofs5-1:5.0.1-0.rc2.55.el4_6.1, autofs5-1:5.0.1-0.rc2.55.el4_6.1.i386, autofs5-1:5.0.1-0.rc2.55.el4_6.1.ia64
- Red Hat Enterprise Linux WS version 4 autofs5-1:5.0.1-0.rc2.55.el4_6.1, autofs5-1:5.0.1-0.rc2.55.el4_6.1.i386, autofs5-1:5.0.1-0.rc2.55.el4_6.1.ia64
Fixes 1 record
Priority LOW 31
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00479 · Published 2007-12-13 · Fixed CWE-16
