CVE:CVE-2007-4135
CNNVD:CNNVD-200709-011
SUSE Linux Enterprise 10版本上的NFSv4 ID mapper (nfsidmap)存在未明漏洞。该漏洞未明攻击向量和影响,且涉及NFSv4 name lookups的uid翻译的名称。The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.
solution:Upgrade nfsv4 nfsidmap to a higher version than 0.16.22,and avoid the version (,0.16.22]