CVE-2009-1630: canonical ubuntu_linux

Modified

Published 14-05-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-1630 is a medium (CVSS 4.4) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 41.8% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Routine

Not severe (CVSS 4.4, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.4/10

010

Medium · v2.0 (NVD)

EPSS score

0.48%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3reference

Advisory lineage

Upstream 0 · Downstream 6

DSA-1809-1 DSA-1844-1 DSA-1865-1 RHSA-2009:1106 RHSA-2009:1132 RHSA-2009:1157

Timeline

14-05-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver.

CVSS metrics

1 score · 1 source · 1 version

v2.04.4

EPSS trend

Probability

0.48%

Chance of exploitation in the next 30 days

Percentile

42%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.48% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

referenceUnverified
Exploit Reference (article.gmane.org)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 8.10 | 9.04

Debian1 product

debian_linuxEOL4.0 | 5.0

Linux1 product

linux_kernel≤ 2.6.29.3

Opensuse1 product

opensuseEOL11.0 | 11.1

Vmware1 product

esx2.5.5 | 3.0.3 | 3.5 | 4.0

5 vendors · 5 products

References

32 links

www.mandriva.com/security/advisories?name=MDVSA-2009:135Vendor AdvisoryX Refsource MANDRIVABroken Link
www.debian.org/security/2009/dsa-1865Vendor AdvisoryX Refsource DEBIANThird Party Advisory
wiki.rpath.com/Advisories:rPSA-2009-0111X Refsource CONFIRMBroken Link
article.gmane.org/gmane.linux.nfs/26592Mailing ListX Refsource MLISTExploit
www.securityfocus.com/bid/34934VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/37471Third Party AdvisoryX Refsource SECUNIABroken Link
linux-nfs.org/pipermail/nfsv4/2006-November/005313.htmlMailing ListX Refsource MLISTBroken Link
www.openwall.com/lists/oss-security/2009/05/13/2Mailing ListX Refsource MLISTExploitThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2009:148Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/35656Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 32 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9990VDB EntrySignatureX Refsource OVALThird Party Advisory
www.debian.org/security/2009/dsa-1844Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.vmware.com/security/advisories/VMSA-2009-0016.htmlX Refsource CONFIRMPatchThird Party Advisory
www.vupen.com/english/advisories/2009/1331VDB EntryX Refsource VUPENBroken Link
www.redhat.com/support/errata/RHSA-2009-1157.htmlVendor AdvisoryX Refsource REDHATBroken Link
bugzilla.redhat.com/show_bug.cgi?id=500297X Refsource CONFIRMExploitIssue TrackingPatchThird Party Advisory
secunia.com/advisories/35106Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/archive/1/505254/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/507985/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/36051Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/35298Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/36327Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8543VDB EntrySignatureX Refsource OVALThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
bugzilla.linux-nfs.org/show_bug.cgi?id=131X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
www.ubuntu.com/usn/usn-793-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
linux-nfs.org/pipermail/nfsv4/2006-November/005323.htmlMailing ListX Refsource MLISTBroken Link
lists.opensuse.org/opensuse-security-announce/2009-07/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.vupen.com/english/advisories/2009/3316VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/35394Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2009/dsa-1809Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/35847Third Party AdvisoryX Refsource SECUNIABroken Link