CVE-2007-5964
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise...
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
Exploit likelihood
What each source reports
NVD Score used
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
- Record
CVE-2007-5964- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
- Record
CVE-2007-5964- Updated
- 2026-11-02
EUVDEUVD-2007-5934 No score
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
- Record
EUVD-2007-5934- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fvq8-m245-r4cr No score
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise...
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
- Record
GHSA-fvq8-m245-r4cr- Updated
- 2026-11-02
OSV No score
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
- Record
CVE-2007-5964- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5964 No score
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
- Record
DEBIAN-CVE-2007-5964- Updated
- 2026-11-07
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
autofsDebian:12 |
before 3.1.4-8 | 3.1.4-8 |
autofsDebian:13 |
before 3.1.4-8 | 3.1.4-8 |
autofsDebian:14 |
before 3.1.4-8 | 3.1.4-8 |
autofsRed Hat:enterprise_linux:5::client |
before 1:5.0.1-0.rc2.55.el5.1 | 1:5.0.1-0.rc2.55.el5.1 |
autofs-debuginfoRed Hat:enterprise_linux:5::client |
before 1:5.0.1-0.rc2.55.el5.1 | 1:5.0.1-0.rc2.55.el5.1 |
autofsRed Hat:enterprise_linux:5::server |
before 1:5.0.1-0.rc2.55.el5.1 | 1:5.0.1-0.rc2.55.el5.1 |
autofs-debuginfoRed Hat:enterprise_linux:5::server |
before 1:5.0.1-0.rc2.55.el5.1 | 1:5.0.1-0.rc2.55.el5.1 |
autofs5Red Hat:enterprise_linux:4::as |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
autofs5-debuginfoRed Hat:enterprise_linux:4::as |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
autofs5Red Hat:enterprise_linux:4::desktop |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
autofs5-debuginfoRed Hat:enterprise_linux:4::desktop |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
autofs5Red Hat:enterprise_linux:4::es |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
autofs5-debuginfoRed Hat:enterprise_linux:4::es |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
autofs5Red Hat:enterprise_linux:4::ws |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
autofs5-debuginfoRed Hat:enterprise_linux:4::ws |
before 1:5.0.1-0.rc2.55.el4_6.1 | 1:5.0.1-0.rc2.55.el4_6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5964 is a medium vulnerability (CVSS 6.9) in Redhat Enterprise Linux, published December 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in autofs 3.1.4-8.
References
redhat.com/support/errata/RHSA-2007-1129.html
securityfocus.com/bid/26841
secunia.com/advisories/28052
osvdb.org/40441
bugzilla.redhat.com/show_bug.cgi?id=409701
Show 18 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10158
securitytracker.com/id?1019087
mandriva.com/security/advisories?name=MDVSA-2008:009
nvd.nist.gov/vuln/detail/CVE-2007-5964
github.com/advisories/GHSA-fvq8-m245-r4cr
security-tracker.debian.org/tracker/CVE-2007-5964
access.redhat.com/errata/RHSA-2007:1128
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1128.json
cve.org/CVERecord?id=CVE-2007-5964