CVE-2007-6285: The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Li...

Security readout for executives and security teams

CVE-2007-6285 is a weakness in autofs5 default handling of the hosts map on some Linux distributions. Without the nodev mount option, a local user who can arrange a remote NFS export may expose special device files through automounting. That can create a serious local security boundary problem, but the bundle does not provide CVSS or confirmed exploitation. Exposure is most likely on legacy Linux systems using autofs5 with the -hosts map enabled, especially distributions referenced by 2007 vendor advisories. Systems without autofs5, without the hosts map, or with nodev enforced are less likely exposed. Treat this as a legacy Linux hardening and patch-verification item. Prioritize internet-facing or multi-user systems only if they still run affected autofs5 configurations. Modern fully patched systems are less likely to need urgent action, but unsupported RHEL-era systems warrant review. Mitigation focus: Review vendor advisories for affected autofs packages and apply available updates.; Ensure autofs -hosts mounts use the nodev option where supported.; Disable unused autofs hosts-map behavior on legacy systems..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.