CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 1.9
CWE Name:  Permissions Privileges and Access Controls
Summary: the nfs client implementation in the kernel in red hat enterprise linux (rhel) 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfs_permission (mode bits) data rather than an nfs access call to the server, which allows local client processes to obtain a false success status from open calls that the server would deny, and possibly obtain sensitive information about file permissions on the server, as demonstrated in a root_squash environment.  note: it is uncertain whether any scenarios involving this issue cross privilege boundaries.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2007-09-18
Last Modified Date: 2008-09-05