Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-1999-0084
8.4 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
updated 5 months, 1 week ago by @LeSuisse Activity log
  • Created suggestion 5 months, 1 week ago
  • @LeSuisse ignored
    15 packages
    • python312Packages.pynfsclient
    • perl538Packages.FileNFSLock
    • perl5Packages.FileNFSLock
    • perlPackages.FileNFSLock
    • mkinitcpio-nfs-utils
    • nfs-ganesha
    • nfs-utils
    • openfst
    • unfs3
    • libnfs
    • svnfs
    • nfstrace
    • unionfs-fuse
    • coqPackages.InfSeqExt
    • perl540Packages.FileNFSLock
    5 months, 1 week ago
  • @LeSuisse dismissed 5 months, 1 week ago
Certain NFS servers allow users to use mknod to gain …

Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.

References

Affected products

n/a
  • ==n/a
nfs
  • <4.1.3
Ignored packages (15)

pkgs.svnfs

FUSE filesystem for accessing Subversion repositories

  • nixos-unstable 0.4
    • nixpkgs-unstable 0.4
    • nixos-unstable-small 0.4

pkgs.unfs3

User-space NFSv3 file system server

pkgs.openfst

Library for working with finite-state transducers

pkgs.nfs-ganesha

NFS server that runs in user space

  • nixos-unstable 9.5
    • nixpkgs-unstable 9.5
    • nixos-unstable-small 9.5

pkgs.unionfs-fuse

FUSE UnionFS implementation

  • nixos-unstable 3.7
    • nixpkgs-unstable 3.7
    • nixos-unstable-small 3.7

pkgs.mkinitcpio-nfs-utils

ipconfig and nfsmount tools for root on NFS, ported from klibc

  • nixos-unstable 0.3
    • nixpkgs-unstable 0.3
    • nixos-unstable-small 0.3 
Old issue. Unclear what was impacted but it is very unlikely something in the current stable branch is.