Test ID:	1.3.6.1.4.1.25623.1.0.59939
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2007:240 (libnfsidmap)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to libnfsidmap announced via advisory MDKSA-2007:240. The NFSv4 ID mapper prior to 0.17 did not properly handle return values from the getpwnam_r() function when performing a username lookup, which could cause it to report a file as being owned by 'root' instead of 'nobody' if the file exists on the server but not the client. The updated packages have been patched to correct these issues. Affected: 2007.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:240 Risk factor : High CVSS Score: 6.2
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4135 26674 http://secunia.com/advisories/26674 26767 http://www.securityfocus.com/bid/26767 27043 http://secunia.com/advisories/27043 45825 http://osvdb.org/45825 MDKSA-2007:240 http://www.mandriva.com/security/advisories?name=MDKSA-2007:240 RHSA-2007:0951 http://www.redhat.com/support/errata/RHSA-2007-0951.html SUSE-SR:2007:018 http://www.novell.com/linux/security/advisories/2007_18_sr.html nfsv4-idmapper-uid-unspecified(36396) https://exchange.xforce.ibmcloud.com/vulnerabilities/36396 oval:org.mitre.oval:def:9864 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9864
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.