Security Advisory

CVE-2005-3623

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-02-13 11:00:00
Last updated 2024-08-07 23:17:23
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.