Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2500HistoryFeb 15, 2014 - 2:57 p.m.
CVE-2011-2500
2014-02-1514:57:06
Debian Security Bug Tracker
security-tracker.debian.org
14
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.008
Percentile
81.3%
The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nfs-utils | < 1:1.2.4-1 | nfs-utils_1:1.2.4-1_all.deb |
| Debian | 11 | all | nfs-utils | < 1:1.2.4-1 | nfs-utils_1:1.2.4-1_all.deb |
| Debian | 999 | all | nfs-utils | < 1:1.2.4-1 | nfs-utils_1:1.2.4-1_all.deb |
| Debian | 13 | all | nfs-utils | < 1:1.2.4-1 | nfs-utils_1:1.2.4-1_all.deb |
Related
nvd
nvd
CVE-2011-2500
2014-02-15 14:57:06
ubuntucve
ubuntucve
CVE-2011-2500
2014-02-15 00:00:00
cve
cve
CVE-2011-2500
2014-02-15 14:57:06
fedora
fedora
[SECURITY] Fedora 15 Update: nfs-utils-1.2.4-0.fc15
2011-07-06 21:42:20
openvas
openvas
Fedora Update for nfs-utils FEDORA-2011-8934
2011-07-12 00:00:00
Fedora Update for nfs-utils FEDORA-2011-8934
2011-07-12 00:00:00
RedHat Update for nfs-utils RHSA-2011:1534-03
2012-07-09 00:00:00
prion
prion
Design/Logic Flaw
2014-02-15 14:57:00
veracode
veracode
Privilege Escalation
2020-04-10 01:07:51
nessus
nessus
SuSE 11.1 Security Update : NFS (SAT Patch Number 4821)
2011-07-11 00:00:00
Fedora 15 : nfs-utils-1.2.4-0.fc15 (2011-8934)
2011-07-07 00:00:00
openSUSE Security Update : nfs-client (openSUSE-SU-2011:0747-1)
2014-06-13 00:00:00
cvelist
cvelist
CVE-2011-2500
2014-02-15 11:00:00
oraclelinux
oraclelinux
nfs-utils security, bug fix, and enhancement update
2011-12-14 00:00:00
redhat
redhat
(RHSA-2011:1534) Low: nfs-utils security, bug fix, and enhancement update
2011-12-06 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.008
Percentile
81.3%
Related for DEBIANCVE:CVE-2011-2500