CVE-2007-4135

CVE-2007-4135 describes a vulnerability in the NFSv4 ID mapper (nfsidmap) prior to version 0.17. This flaw stems from improper handling of return values from the getpwnam_r function during username lookups, potentially causing files to be incorrectly reported as owned by "root" instead of "nobody" if the file exists on the server but not the client. The vulnerability has a CVSS score of 6.2, indicating a moderate severity with high impact on confidentiality, integrity, and availability, though requiring local access and high attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.