CVE-2009-1072

Published: Mar 25, 2009Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:C/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

Affected (20)

Products: Linux: Linux Kernel · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server · +3 more

Show all products

Linux: Linux Kernel · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server · Debian: Debian Linux · Canonical: Ubuntu Linux · Vmware: Vcenter Server, Virtualcenter, Esx, Server, Vma

1 product

1 product

2 products

Linux Enterprise Desktop

Linux Enterprise Server

1 product

1 product

5 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.28.9

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.3
Opensuse Opensuse	Version 11.0
Opensuse Opensuse	Version 11.1
Suse Linux Enterprise Desktop	Version 10 sp2
Suse Linux Enterprise Server	Version 10 sp2

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04

Configuration E

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vmware Vcenter Server	Version 4.0
Vmware Virtualcenter	Version 2.0.2
Vmware Virtualcenter	Version 2.5

Running on/with	Platform Versions
Microsoft Windows	All versions

Configuration F

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Esx	Version 3.0.3
Vmware Esx	Version 3.5
Vmware Esx	Version 4.0
Vmware Server	Version 2.0.0

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vmware Vma	Version 4.0

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 5.0

Related CWEs

CWE-16

References (58)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/34422

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/34432

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/34786

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35121

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35185

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35343

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35390

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35394

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/35656

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/37471

Source: cve@mitre.org

Broken Link

http://thread.gmane.org/gmane.linux.kernel/805280

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2009/dsa-1800

Source: cve@mitre.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.9

Source: cve@mitre.org

Broken Link

http://www.openwall.com/lists/oss-security/2009/03/23/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2009-1081.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/34205

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-793-1

Source: cve@mitre.org

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2009/0802

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/49356

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10314

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8382

Source: cve@mitre.org

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=76a67ec6fb79ff3570dcb5342142c16098299911