Synopsis

Important: autofs5 security update

Type/Severity

Security Advisory: Important

Topic

Updated Red Hat Enterprise Linux 4 Technology Preview autofs5 packages are
now available to fix a security flaw.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

The autofs utility controls the operation of the automount daemon, which
automatically mounts and unmounts file systems after a period of
inactivity. The autofs version 5 package was made available as a
technology preview in Red Hat Enterprise Linux version 4.6.

There was a security issue with the default installed configuration of
autofs version 5 whereby the entry for the "hosts" map did not specify the
"nosuid" mount option. A local user with control of a remote nfs server
could create a setuid root executable within an exported filesystem on the
remote nfs server that, if mounted using the default hosts map, would allow
the user to gain root privileges. (CVE-2007-5964)

Due to the fact that autofs version 5 always mounted hosts map entries suid
by default, autofs has now been altered to always use the "nosuid" option
when mounting from the default hosts map. The "suid" option must be
explicitly given in the master map entry to revert to the old behavior.
This change affects only the hosts map which corresponds to the /net entry
in the default configuration.

Users are advised to upgrade to these updated autofs5 packages, which
resolve this issue.

Red Hat would like to thank Josh Lange for reporting this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server - Extended Update Support 4.6 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 4.6 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 4.6 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6 ppc

Fixes

• BZ - 410031 - CVE-2007-5964 autofs defaults don't restrict suid in /net

CVEs

• CVE-2007-5964

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 4

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
x86_64
autofs5-5.0.1-0.rc2.55.el4_6.1.x86_64.rpm	SHA-256: af59d03a3e0b5049b28cfd700e61fd9397242fdfe0a9b1589be793c796e78fb3
autofs5-5.0.1-0.rc2.55.el4_6.1.x86_64.rpm	SHA-256: af59d03a3e0b5049b28cfd700e61fd9397242fdfe0a9b1589be793c796e78fb3
ia64
autofs5-5.0.1-0.rc2.55.el4_6.1.ia64.rpm	SHA-256: b2e81ac746ee2112d57367403e1dd17e77203d62e918a1851c8c4c7233ee0801
autofs5-5.0.1-0.rc2.55.el4_6.1.ia64.rpm	SHA-256: b2e81ac746ee2112d57367403e1dd17e77203d62e918a1851c8c4c7233ee0801
i386
autofs5-5.0.1-0.rc2.55.el4_6.1.i386.rpm	SHA-256: dbde0d613ba1d5fa5f2b37e605d77bc007574f78359f3bbf4a11e2eb8326d329
autofs5-5.0.1-0.rc2.55.el4_6.1.i386.rpm	SHA-256: dbde0d613ba1d5fa5f2b37e605d77bc007574f78359f3bbf4a11e2eb8326d329

Red Hat Enterprise Linux Server - Extended Update Support 4.6

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
x86_64
autofs5-5.0.1-0.rc2.55.el4_6.1.x86_64.rpm	SHA-256: af59d03a3e0b5049b28cfd700e61fd9397242fdfe0a9b1589be793c796e78fb3
autofs5-5.0.1-0.rc2.55.el4_6.1.x86_64.rpm	SHA-256: af59d03a3e0b5049b28cfd700e61fd9397242fdfe0a9b1589be793c796e78fb3
ia64
autofs5-5.0.1-0.rc2.55.el4_6.1.ia64.rpm	SHA-256: b2e81ac746ee2112d57367403e1dd17e77203d62e918a1851c8c4c7233ee0801
autofs5-5.0.1-0.rc2.55.el4_6.1.ia64.rpm	SHA-256: b2e81ac746ee2112d57367403e1dd17e77203d62e918a1851c8c4c7233ee0801
i386
autofs5-5.0.1-0.rc2.55.el4_6.1.i386.rpm	SHA-256: dbde0d613ba1d5fa5f2b37e605d77bc007574f78359f3bbf4a11e2eb8326d329
autofs5-5.0.1-0.rc2.55.el4_6.1.i386.rpm	SHA-256: dbde0d613ba1d5fa5f2b37e605d77bc007574f78359f3bbf4a11e2eb8326d329

Red Hat Enterprise Linux Workstation 4

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
x86_64
autofs5-5.0.1-0.rc2.55.el4_6.1.x86_64.rpm	SHA-256: af59d03a3e0b5049b28cfd700e61fd9397242fdfe0a9b1589be793c796e78fb3
ia64
autofs5-5.0.1-0.rc2.55.el4_6.1.ia64.rpm	SHA-256: b2e81ac746ee2112d57367403e1dd17e77203d62e918a1851c8c4c7233ee0801
i386
autofs5-5.0.1-0.rc2.55.el4_6.1.i386.rpm	SHA-256: dbde0d613ba1d5fa5f2b37e605d77bc007574f78359f3bbf4a11e2eb8326d329

Red Hat Enterprise Linux Desktop 4

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
x86_64
autofs5-5.0.1-0.rc2.55.el4_6.1.x86_64.rpm	SHA-256: af59d03a3e0b5049b28cfd700e61fd9397242fdfe0a9b1589be793c796e78fb3
i386
autofs5-5.0.1-0.rc2.55.el4_6.1.i386.rpm	SHA-256: dbde0d613ba1d5fa5f2b37e605d77bc007574f78359f3bbf4a11e2eb8326d329

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
s390x
autofs5-5.0.1-0.rc2.55.el4_6.1.s390x.rpm	SHA-256: 4c0fa70708bfe6171adbb90f34cb8d3bdccb5145bcdcdef3ba2594ed66483d9a
s390
autofs5-5.0.1-0.rc2.55.el4_6.1.s390.rpm	SHA-256: 80adca128f7de35c1453ecd782751f2d26490b13f5dfd40acc110a9ffa7876ab

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
s390x
autofs5-5.0.1-0.rc2.55.el4_6.1.s390x.rpm	SHA-256: 4c0fa70708bfe6171adbb90f34cb8d3bdccb5145bcdcdef3ba2594ed66483d9a
s390
autofs5-5.0.1-0.rc2.55.el4_6.1.s390.rpm	SHA-256: 80adca128f7de35c1453ecd782751f2d26490b13f5dfd40acc110a9ffa7876ab

Red Hat Enterprise Linux for Power, big endian 4

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
ppc
autofs5-5.0.1-0.rc2.55.el4_6.1.ppc.rpm	SHA-256: e0345a44f0ef5af557061f06045d9c021a1f2779be3b01d623eda6505fafd3f7

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6

SRPM
autofs5-5.0.1-0.rc2.55.el4_6.1.src.rpm	SHA-256: 081af15278ce5bbf582a51115f344f34bd7b95cd66c374dd77993a2d6cdddaa9
ppc
autofs5-5.0.1-0.rc2.55.el4_6.1.ppc.rpm	SHA-256: e0345a44f0ef5af557061f06045d9c021a1f2779be3b01d623eda6505fafd3f7