'; } else{ echo ''; } echo '
|
|
|||
| Rule General Information |
|---|
| Release Date: | 2026-08-13 | |
| Rule Name: | Linux Kernel Nfsd CAP_MKNOD Security Bypass Vulnerability (CVE-2009-1072) | |
| Severity: | ||
| CVE ID: | ||
| Rule Protection Details |
|---|
| Description: | nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option. | |
| Impact: | An attacker could exploit this vulnerability to have unspecified effect. | |
| Affected OS: | Linux | |
| Reference: | SecurityFocusBID:34205 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git a=commitdiff h=76a67ec6fb79ff3570dcb5342142c16098299911 |
|
| Solutions |
|---|
| The vendor has released upgrade patches to fix vulnerabilities, please visit: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=76a67ec6fb79ff3570dcb5342142c16098299911#patch1 |