CVE-2004-0750
published 2004-10-20CVE-2004-0750: Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the…
PriorityP422high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.36%
68.7th percentile
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_desktop | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vg3g-mj2f-4m52: Unknown vulnerability in redhat-config-nfs before 1
ghsa_unreviewed·2022-04-29
CVE-2004-0750 [HIGH] GHSA-vg3g-mj2f-4m52: Unknown vulnerability in redhat-config-nfs before 1
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.
Red Hat
security flaw
vendor_redhat·2004-09-22·CVSS 7.5
CVE-2004-0750 [HIGH] security flaw
security flaw
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2004-0750 security flaw
bugzilla·2018-08-16·CVSS 7.5
CVE-2004-0750 [HIGH] CVE-2004-0750 security flaw
CVE-2004-0750 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.
Bugzilla
CVE-2004-0750 [PATCH] /etc/exports has incorrect syntax for multiple hosts with a single mount point
bugzilla·2003-10-25·CVSS 7.5
CVE-2004-0750 [HIGH] CVE-2004-0750 [PATCH] /etc/exports has incorrect syntax for multiple hosts with a single mount point
CVE-2004-0750 [PATCH] /etc/exports has incorrect syntax for multiple hosts with a single mount point
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5) Gecko/20031007
Firebird/0.7
Description of problem:
Used the redhat configuration tool for NFS in KDE in RHEL WS 3.0.
System Settings -> NFS
Configured a single mount point for export /tftpboot for three
servers. The resulting file in /etc/export was as follows :
/tftpboot 10.1.2.3 192.168.50.5 172.23.42.2(rw,sync,no_root_squash)
This resulted in 10.1.2.3 and 192.168.50.5 mounting the filesystem in
read-only because they did not have rw, sync or no_root_squash). Modified the
file by hand and it worked fine :
/tftpboot 10.1.2.3(rw,sync,no_root_squash) \
192.168.50.5(rw,sync,no_root_squash) \
172.23.42.2(
http://www.redhat.com/support/errata/RHSA-2004-434.htmlhttp://www.securityfocus.com/archive/1/419762/100/0/threadedhttp://www.securityfocus.com/bid/11240https://exchange.xforce.ibmcloud.com/vulnerabilities/17478https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10696http://www.redhat.com/support/errata/RHSA-2004-434.htmlhttp://www.securityfocus.com/archive/1/419762/100/0/threadedhttp://www.securityfocus.com/bid/11240https://exchange.xforce.ibmcloud.com/vulnerabilities/17478https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10696
2004-10-20
Published