CVE-2007-6285: Red Hat Enterprise Linux

Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device.

Affected products

• Red Hat Enterprise Linux: version 4.0 only; version 5.0 only

Published 2007-12-20. Last modified 2026-06-16.