nfs-utils rpc.mountd Privilege Escalation Vulnerability

A vulnerability in the rpc.mountd daemon of the nfs-utils package for Linux allows NFSv3 clients to escalate privileges assigned in the /etc/exports file. This vulnerability enables clients to access any subdirectory or subtree of an exported directory, disregarding file permissions and any 'root_squash' or 'all_squash' attributes that should apply to them. Red Hat Enterprise Linux systems configured as NFSv3 servers are affected.

Impact

Exploitation of this vulnerability allows authenticated NFSv3 clients to bypass 'root_squash' or 'all_squash' restrictions, accessing NFS share subdirectories with elevated privileges, contrary to intended file permissions.