ByteOS Network

NVD Vulnerability Details :

CVE-2009-1630

Modified

Source-cve@mitre.org

Published At-14 May, 2009 | 17:30

Updated At-23 Apr, 2026 | 00:35

The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 4.4

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions up to 2.6.29.3(inclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.0

cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.1

cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>4.0

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>5.0

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>8.10

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>9.04

cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>esx>>2.5.5

cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>esx>>3.0.3

cpe:2.3:o:vmware:esx:3.0.3:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>esx>>3.5

cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>esx>>4.0

cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2009-09-10T00:00:00

This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, and 3. It was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1132.html , https://rhn.redhat.com/errata/RHSA-2009-1106.html , and https://rhn.redhat.com/errata/RHSA-2009-1157.html .

References

Hyperlink	Source	Resource
http://article.gmane.org/gmane.linux.nfs/26592	cve@mitre.org	Exploit
http://bugzilla.linux-nfs.org/show_bug.cgi?id=131	cve@mitre.org	Issue Tracking Patch Third Party Advisory
http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html	cve@mitre.org	Broken Link
http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html	cve@mitre.org	Broken Link
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html	cve@mitre.org	Mailing List Third Party Advisory
http://secunia.com/advisories/35106	cve@mitre.org	Broken Link
http://secunia.com/advisories/35298	cve@mitre.org	Broken Link
http://secunia.com/advisories/35394	cve@mitre.org	Broken Link
http://secunia.com/advisories/35656	cve@mitre.org	Broken Link
http://secunia.com/advisories/35847	cve@mitre.org	Broken Link
http://secunia.com/advisories/36051	cve@mitre.org	Broken Link
http://secunia.com/advisories/36327	cve@mitre.org	Broken Link
http://secunia.com/advisories/37471	cve@mitre.org	Broken Link
http://wiki.rpath.com/Advisories:rPSA-2009-0111	cve@mitre.org	Broken Link
http://www.debian.org/security/2009/dsa-1809	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2009/dsa-1844	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2009/dsa-1865	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:135	cve@mitre.org	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2009:148	cve@mitre.org	Broken Link
http://www.openwall.com/lists/oss-security/2009/05/13/2	cve@mitre.org	Exploit Mailing List Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1157.html	cve@mitre.org	Broken Link
http://www.securityfocus.com/archive/1/505254/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/507985/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/34934	cve@mitre.org	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-793-1	cve@mitre.org	Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2009-0016.html	cve@mitre.org	Patch Third Party Advisory
http://www.vupen.com/english/advisories/2009/1331	cve@mitre.org	Broken Link
http://www.vupen.com/english/advisories/2009/3316	cve@mitre.org	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=500297	cve@mitre.org	Exploit Issue Tracking Patch Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543	cve@mitre.org	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990	cve@mitre.org	Third Party Advisory
http://article.gmane.org/gmane.linux.nfs/26592	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://bugzilla.linux-nfs.org/show_bug.cgi?id=131	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch Third Party Advisory
http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://secunia.com/advisories/35106	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/35298	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/35394	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/35656	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/35847	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/36051	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/36327	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/37471	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://wiki.rpath.com/Advisories:rPSA-2009-0111	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.debian.org/security/2009/dsa-1809	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2009/dsa-1844	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2009/dsa-1865	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:135	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2009:148	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.openwall.com/lists/oss-security/2009/05/13/2	af854a3a-2127-422b-91ae-364da2661108	Exploit Mailing List Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1157.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.securityfocus.com/archive/1/505254/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/507985/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/34934	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-793-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2009-0016.html	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
http://www.vupen.com/english/advisories/2009/1331	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.vupen.com/english/advisories/2009/3316	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=500297	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking Patch Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://article.gmane.org/gmane.linux.nfs/26592

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://bugzilla.linux-nfs.org/show_bug.cgi?id=131

Source: cve@mitre.org

Resource:

Issue Tracking

Patch

Third Party Advisory

Hyperlink: http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://secunia.com/advisories/35106

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35298

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35394

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35656

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35847

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/36051

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/36327

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/37471

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://wiki.rpath.com/Advisories:rPSA-2009-0111

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.debian.org/security/2009/dsa-1809

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2009/dsa-1844

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2009/dsa-1865

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:135

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:148

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.openwall.com/lists/oss-security/2009/05/13/2

Source: cve@mitre.org

Resource:

Exploit

Mailing List

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-1157.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/archive/1/505254/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/34934

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/usn-793-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2009/1331

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=500297

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Patch

Third Party Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://article.gmane.org/gmane.linux.nfs/26592

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://bugzilla.linux-nfs.org/show_bug.cgi?id=131

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Patch

Third Party Advisory

Hyperlink: http://linux-nfs.org/pipermail/nfsv4/2006-November/005313.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://linux-nfs.org/pipermail/nfsv4/2006-November/005323.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://secunia.com/advisories/35106

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35298

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35394

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35656

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/35847

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/36051

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/36327

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://secunia.com/advisories/37471

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://wiki.rpath.com/Advisories:rPSA-2009-0111

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.debian.org/security/2009/dsa-1809

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2009/dsa-1844

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2009/dsa-1865

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:135

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:148

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.openwall.com/lists/oss-security/2009/05/13/2

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Mailing List

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-1157.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/archive/1/505254/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/34934

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/usn-793-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2009/1331

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.vupen.com/english/advisories/2009/3316

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=500297

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Issue Tracking

Patch

Third Party Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History