CVE:CVE-2009-1630
CNNVD:CNNVD-200905-191
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
如果atomic_open可用的话，Linux kernel NFS客户端实现中fs/nfs/dir.c的nfs_permission函数没有检查执行(EXEC或MAY_EXEC)权限位，这允许本地用户绕过限制执行文件。
solution:Upgrade linux linux_kernel to a higher version than 2.6.29.3,and avoid the version (,2.6.29.3]; Upgrade opensuse opensuse to a higher version than 11.0,11.1,and avoid the version 11.0,11.1; Upgrade debian debian_linux to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,8.10,9.04,and avoid the version 6.06,8.04,8.10,9.04; Upgrade vmware esx to a higher version than 2.5.5,3.0.3,3.5,4.0,and avoid the version 2.5.5,3.0.3,3.5,4.0