CVE-2005-3623

nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.

Date published : 2006-02-13

http://www.securityfocus.com/bid/16570

http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm