CVE-2016-0911

Severity: high (CVSS 8.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-19 · updated 2026-06-17
Weakness: CWE-264

Description

EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges.

Affected products

EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0: through 5.7.1.0

References

http://seclists.org/bugtraq/2016/Jun/50
http://www.securitytracker.com/id/1036079
http://seclists.org/bugtraq/2016/Jun/50
http://www.securitytracker.com/id/1036079

Get alerted when CVE-2016-0911 or the next vulnerability affects your stack