Linux Kernel nfsd 'CAP_MKNOD' Unauthorized Access Vulnerability
Severity: MEDIUM
CVE Identifier: CVE-2009-1072
Advisory Date: JUL 21, 2015
DESCRIPTION
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1003401
Trend Micro Deep Security DPI Rule Name: 1003401 - Disallow Device Node Creation Over NFS
AFFECTED SOFTWARE AND VERSION
- linux kernel 2.2.27
- linux kernel 2.4.36
- linux kernel 2.4.36.
- linux kernel 2.4.36.2
- linux kernel 2.4.36.3
- linux kernel 2.4.36.4
- linux kernel 2.4.36.5
- linux kernel 2.4.36.6
- linux kernel 2.6
- linux kernel 2.6.0
- linux kernel 2.6.1
- linux kernel 2.6.10
- linux kernel 2.6.11
- linux kernel 2.6.11.1
- linux kernel 2.6.11.10
- linux kernel 2.6.11.11
- linux kernel 2.6.11.12
- linux kernel 2.6.11.2
- linux kernel 2.6.11.3
- linux kernel 2.6.11.4
- linux kernel 2.6.11.5
- linux kernel 2.6.11.6
- linux kernel 2.6.11.7
- linux kernel 2.6.11.8
- linux kernel 2.6.11.9
- linux kernel 2.6.12
- linux kernel 2.6.12.1
- linux kernel 2.6.12.2
- linux kernel 2.6.12.3
- linux kernel 2.6.12.4
- linux kernel 2.6.12.5
- linux kernel 2.6.12.6
- linux kernel 2.6.13
- linux kernel 2.6.13.1
- linux kernel 2.6.13.2
- linux kernel 2.6.13.3
- linux kernel 2.6.13.4
- linux kernel 2.6.13.5
- linux kernel 2.6.14
- linux kernel 2.6.14.1
- linux kernel 2.6.14.2
- linux kernel 2.6.14.3
- linux kernel 2.6.14.4
- linux kernel 2.6.14.5
- linux kernel 2.6.14.6
- linux kernel 2.6.14.7
- linux kernel 2.6.15
- linux kernel 2.6.15.1
- linux kernel 2.6.15.2
- linux kernel 2.6.15.3
- linux kernel 2.6.15.4
- linux kernel 2.6.15.5
- linux kernel 2.6.15.6
- linux kernel 2.6.15.7
- linux kernel 2.6.16
- linux kernel 2.6.16.1
- linux kernel 2.6.16.10
- linux kernel 2.6.16.11
- linux kernel 2.6.16.12
- linux kernel 2.6.16.13
- linux kernel 2.6.16.14
- linux kernel 2.6.16.15
- linux kernel 2.6.16.16
- linux kernel 2.6.16.17
- linux kernel 2.6.16.18
- linux kernel 2.6.16.19
- linux kernel 2.6.16.2
- linux kernel 2.6.16.20
- linux kernel 2.6.16.21
- linux kernel 2.6.16.22
- linux kernel 2.6.16.23
- linux kernel 2.6.16.24
- linux kernel 2.6.16.25
- linux kernel 2.6.16.26
- linux kernel 2.6.16.27
- linux kernel 2.6.16.28
- linux kernel 2.6.16.29
- linux kernel 2.6.16.3
- linux kernel 2.6.16.30
- linux kernel 2.6.16.31
- linux kernel 2.6.16.32
- linux kernel 2.6.16.33
- linux kernel 2.6.16.34
- linux kernel 2.6.16.35
- linux kernel 2.6.16.36
- linux kernel 2.6.16.37
- linux kernel 2.6.16.38
- linux kernel 2.6.16.39
- linux kernel 2.6.16.4
- linux kernel 2.6.16.40
- linux kernel 2.6.16.41
- linux kernel 2.6.16.42
- linux kernel 2.6.16.43
- linux kernel 2.6.16.44
- linux kernel 2.6.16.45
- linux kernel 2.6.16.46
- linux kernel 2.6.16.47
- linux kernel 2.6.16.48
- linux kernel 2.6.16.49
- linux kernel 2.6.16.5
- linux kernel 2.6.16.50
- linux kernel 2.6.16.51
- linux kernel 2.6.16.52
- linux kernel 2.6.16.53
- linux kernel 2.6.16.54
- linux kernel 2.6.16.55
- linux kernel 2.6.16.56
- linux kernel 2.6.16.57
- linux kernel 2.6.16.58
- linux kernel 2.6.16.59
- linux kernel 2.6.16.6
- linux kernel 2.6.16.60
- linux kernel 2.6.16.61
- linux kernel 2.6.16.62
- linux kernel 2.6.16.7
- linux kernel 2.6.16.8
- linux kernel 2.6.16.9
- linux kernel 2.6.17
- linux kernel 2.6.17.1
- linux kernel 2.6.17.10
- linux kernel 2.6.17.11
- linux kernel 2.6.17.12
- linux kernel 2.6.17.13
- linux kernel 2.6.17.14
- linux kernel 2.6.17.2
- linux kernel 2.6.17.3
- linux kernel 2.6.17.4
- linux kernel 2.6.17.5
- linux kernel 2.6.17.6
- linux kernel 2.6.17.7
- linux kernel 2.6.17.8
- linux kernel 2.6.17.9
- linux kernel 2.6.18
- linux kernel 2.6.18.1
- linux kernel 2.6.18.2
- linux kernel 2.6.18.3
- linux kernel 2.6.18.4
- linux kernel 2.6.18.5
- linux kernel 2.6.18.6
- linux kernel 2.6.18.7
- linux kernel 2.6.18.8
- linux kernel 2.6.19
- linux kernel 2.6.19.1
- linux kernel 2.6.19.2
- linux kernel 2.6.19.3
- linux kernel 2.6.19.4
- linux kernel 2.6.19.5
- linux kernel 2.6.19.6
- linux kernel 2.6.19.7
- linux kernel 2.6.2
- linux kernel 2.6.2.27.13
- linux kernel 2.6.20
- linux kernel 2.6.20.1
- linux kernel 2.6.20.10
- linux kernel 2.6.20.11
- linux kernel 2.6.20.12
- linux kernel 2.6.20.13
- linux kernel 2.6.20.14
- linux kernel 2.6.20.15
- linux kernel 2.6.20.16
- linux kernel 2.6.20.17
- linux kernel 2.6.20.18
- linux kernel 2.6.20.19
- linux kernel 2.6.20.2
- linux kernel 2.6.20.20
- linux kernel 2.6.20.21
- linux kernel 2.6.20.3
- linux kernel 2.6.20.4
- linux kernel 2.6.20.5
- linux kernel 2.6.20.6
- linux kernel 2.6.20.7
- linux kernel 2.6.20.8
- linux kernel 2.6.20.9
- linux kernel 2.6.21
- linux kernel 2.6.21.1
- linux kernel 2.6.21.2
- linux kernel 2.6.21.3
- linux kernel 2.6.21.4
- linux kernel 2.6.21.5
- linux kernel 2.6.21.6
- linux kernel 2.6.21.7
- linux kernel 2.6.22
- linux kernel 2.6.22.1
- linux kernel 2.6.22.10
- linux kernel 2.6.22.11
- linux kernel 2.6.22.12
- linux kernel 2.6.22.13
- linux kernel 2.6.22.14
- linux kernel 2.6.22.15
- linux kernel 2.6.22.16
- linux kernel 2.6.22.17
- linux kernel 2.6.22.18
- linux kernel 2.6.22.19
- linux kernel 2.6.22.2
- linux kernel 2.6.22.20
- linux kernel 2.6.22.21
- linux kernel 2.6.22.22
- linux kernel 2.6.22.3
- linux kernel 2.6.22.4
- linux kernel 2.6.22.5
- linux kernel 2.6.22.6
- linux kernel 2.6.22.7
- linux kernel 2.6.22.8
- linux kernel 2.6.22.9
- linux kernel 2.6.22_rc1
- linux kernel 2.6.22_rc7
- linux kernel 2.6.23
- linux kernel 2.6.23.1
- linux kernel 2.6.23.10
- linux kernel 2.6.23.11
- linux kernel 2.6.23.12
- linux kernel 2.6.23.13
- linux kernel 2.6.23.14
- linux kernel 2.6.23.15
- linux kernel 2.6.23.16
- linux kernel 2.6.23.17
- linux kernel 2.6.23.2
- linux kernel 2.6.23.3
- linux kernel 2.6.23.4
- linux kernel 2.6.23.5
- linux kernel 2.6.23.6
- linux kernel 2.6.23.7
- linux kernel 2.6.23.8
- linux kernel 2.6.23.9
- linux kernel 2.6.23_rc1
- linux kernel 2.6.24
- linux kernel 2.6.24.1
- linux kernel 2.6.24.2
- linux kernel 2.6.24.3
- linux kernel 2.6.24.4
- linux kernel 2.6.24.5
- linux kernel 2.6.24.6
- linux kernel 2.6.24.7
- linux kernel 2.6.24_rc1
- linux kernel 2.6.24_rc4
- linux kernel 2.6.24_rc5
- linux kernel 2.6.25
- linux kernel 2.6.25.1
- linux kernel 2.6.25.10
- linux kernel 2.6.25.11
- linux kernel 2.6.25.12
- linux kernel 2.6.25.13
- linux kernel 2.6.25.14
- linux kernel 2.6.25.15
- linux kernel 2.6.25.16
- linux kernel 2.6.25.17
- linux kernel 2.6.25.18
- linux kernel 2.6.25.19
- linux kernel 2.6.25.2
- linux kernel 2.6.25.20
- linux kernel 2.6.25.3
- linux kernel 2.6.25.4
- linux kernel 2.6.25.5
- linux kernel 2.6.25.6
- linux kernel 2.6.25.7
- linux kernel 2.6.25.8
- linux kernel 2.6.25.9
- linux kernel 2.6.26
- linux kernel 2.6.26.1
- linux kernel 2.6.26.2
- linux kernel 2.6.26.3
- linux kernel 2.6.26.4
- linux kernel 2.6.26.5
- linux kernel 2.6.26.6
- linux kernel 2.6.26.7
- linux kernel 2.6.26.8
- linux kernel 2.6.27
- linux kernel 2.6.27.1
- linux kernel 2.6.27.10
- linux kernel 2.6.27.11
- linux kernel 2.6.27.12
- linux kernel 2.6.27.13
- linux kernel 2.6.27.14
- linux kernel 2.6.27.15
- linux kernel 2.6.27.16
- linux kernel 2.6.27.17
- linux kernel 2.6.27.18
- linux kernel 2.6.27.19
- linux kernel 2.6.27.2
- linux kernel 2.6.27.20
- linux kernel 2.6.27.3
- linux kernel 2.6.27.4
- linux kernel 2.6.27.5
- linux kernel 2.6.27.6
- linux kernel 2.6.27.7
- linux kernel 2.6.27.8
- linux kernel 2.6.27.9
- linux kernel 2.6.28
- linux kernel 2.6.28.1
- linux kernel 2.6.28.2
- linux kernel 2.6.28.3
- linux kernel 2.6.28.4
- linux kernel 2.6.28.5
- linux kernel 2.6.28.6
- linux kernel 2.6.28.7
- linux kernel 2.6.28.8
- linux kernel 2.6.3
- linux kernel 2.6.4
- linux kernel 2.6.5
- linux kernel 2.6.6
- linux kernel 2.6.7
- linux kernel 2.6.8
- linux kernel 2.6.8.1
- linux kernel 2.6.9
Featured Stories
Open RAN: Attack of the xAppsThis article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handlingRead more
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking ServicesThis article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.Read more
How Residential Proxies and CAPTCHA-Solving Services Become Agents of AbuseThis article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.Read more
Abusing Argo CD, Helm, and Artifact Hub: An Analysis of Supply Chain Attacks in Cloud-Native ApplicationsWe provide an overview of cloud-native tools and examine how cybercriminals can exploit their vulnerabilities to launch supply chain attacks.Read more