CVE-2007-5964: Red Hat Enterprise Linux

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.

Affected products

• Red Hat Enterprise Linux: version 5.0 only

Published 2007-12-13. Last modified 2026-06-16.