{"id":"CVE-2005-3623","aliases":["EUVD-2005-3620","GHSA-3gq3-wqjv-f3fj","RHSA-2006:0575"],"status":"published","title":"nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting...","description":"nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03413,"percentile":0.88958,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2005-12-31T05:00:00Z","modified":"2026-06-26T10:04:45Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-largesmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-largesmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-largesmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-largesmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-largesmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-largesmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-hugemem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-hugemem-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-largesmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-largesmp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-smp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"kernel-smp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.9-42.EL"}]}],"bundled":15}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://secunia.com/advisories/18788","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19038","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_06_kernel.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0575.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11707","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://lkml.org/lkml/2005/12/23/171","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch"]},{"url":"http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Patch"]},{"url":"http://secunia.com/advisories/21465","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/22417","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16570","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3623","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3gq3-wqjv-f3fj"},{"url":"https://access.redhat.com/errata/RHSA-2006:0575","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=141342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=149933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=151981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=154984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=155926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=156145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=156663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=157404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=157902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=158989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=165113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=165245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=166541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=168285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=169260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=169456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=169600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=170143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=170434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=171304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=171507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=171645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=171740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=172199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=172696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=173193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=173489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=173843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=173895","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=174019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=174155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=174470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=174639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=174671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=174990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=175616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=175763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=175778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=175854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=176107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=176173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=176361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=176601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=176612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=177439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=177509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=178084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=178720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=178845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=179206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=179334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=179752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=180028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=180138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=180195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=180568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=180621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=180958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=181881","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=182137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=182684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=182726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=183392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=183416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=183463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=183661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=183664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=184208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=184254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=184535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=184583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=185991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=186751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=187951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=188080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=188141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=188296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=188912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=189797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=190576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=192098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=192635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=192779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=193230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=193696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=193728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=193838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=194215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=194533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=195002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=195254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=195502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=196512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=196712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=197387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=198321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=198892","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0575.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-3055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3055","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-3623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3623","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-0038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-0456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618001","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0456","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-0457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618002","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0457","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0457","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-0742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618015","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0742","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0742","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-1052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618024","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1052","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-1056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618025","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1056","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-1242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1242","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1242","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-1343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618033","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1343","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-1857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618067","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1857","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2275","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618104","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2446","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618106","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2448","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2934","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-3623","description":"nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.","status":"published","published":"2006-02-13T11:00:00Z","modified":"2024-08-07T23:17:23.305Z","updated_at":"2026-11-02T14:33:38.906611Z"}],"euvd":[{"id":"EUVD-2005-3620","description":"nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.","status":"published","published":"2006-02-13T11:00:00Z","modified":"2024-08-07T23:17:23Z","updated_at":"2026-11-03T01:15:26.279574Z"}],"ghsa":[{"id":"GHSA-3gq3-wqjv-f3fj","title":"nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting...","description":"nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.","status":"published","published":"2022-05-01T02:19:37Z","modified":"2024-02-02T03:30:31Z","cwes":["CWE-862"],"updated_at":"2026-11-02T14:55:31.84746Z"}],"nvd":[{"id":"CVE-2005-3623","description":"nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.","status":"published","published":"2005-12-31T05:00:00Z","modified":"2026-06-16T22:17:16.26Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:00:58.826417Z"}],"osv":[{"id":"RHSA-2006:0575","title":"Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4","status":"published","published":"2024-09-15T16:15:14Z","modified":"2026-06-26T10:04:45Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}