Description
The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | autofs | 1:5.0.1-0.rc2.55.el5.2 | RHSA-2007:1176 |
| RHEL 4 | autofs5 | 1:5.0.1-0.rc2.55.el4_6.2 | RHSA-2007:1177 |
Advisories 2
- RHSA-2007:1176 Red Hat Security Advisory: autofs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:1177 Red Hat Security Advisory: autofs5 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- FEDORA-2007-4707 vendor-advisory
- 40442 vdb-entry
- FEDORA-2007-4709 vendor-advisory
- 28168 third-party-advisory
- 28456 third-party-advisory
- RHSA-2007:1177 vendor-advisory
- autofs-hostsmap-weak-securtiy(39188) vdb-entry
- oval:org.mitre.oval:def:11457 vdb-entry signature
- RHSA-2007:1176 vendor-advisory
- 1019137 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=426218
- 26970 vdb-entry
- MDVSA-2008:009 vendor-advisory
- 28156 third-party-advisory