Unrated severityNVD Advisory· Published Sep 5, 2007· Updated Jun 16, 2026

CVE-2007-4135

Description

The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nfsv4/Nfsidmap2 versions
cpe:2.3:a:nfsv4:nfsidmap:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nfsv4:nfsidmap:*:*:*:*:*:*:*:*range: <=0.16.22
- (no CPE)range: <0.17

Patches

Vulnerability mechanics

References

secunia.com/advisories/26674nvdPatchVendor Advisory
secunia.com/advisories/27043nvdVendor Advisory
www.novell.com/linux/security/advisories/2007_18_sr.htmlnvdVendor Advisory
osvdb.org/45825nvd
www.mandriva.com/security/advisoriesnvd
www.redhat.com/support/errata/RHSA-2007-0951.htmlnvd
www.securityfocus.com/bid/26767nvd
exchange.xforce.ibmcloud.com/vulnerabilities/36396nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9864nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000