Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
autofs nodev加载选项本地权限提升漏洞
Vulnerability Description
autofs是Red Hat系统中用于控制automount守护程序的运行工具。 autofs 5版的默认配置中存在安全漏洞，-hosts映射项没有指定nodev加载选项。控制了远程NFS服务器的本地攻击者可以在远程文件系统上创建特殊的设备文件，如果使用默认的-hosts映射加载的话，就会允许用户访问重要的系统设备。
CVSS Information
N/A
Vulnerability Type
N/A