Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-1923
HistoryJan 21, 2014 - 6:55 p.m.

CVE-2013-1923

2014-01-2118:55:09
CWE-200
[email protected]
web.nvd.nist.gov

3.2 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.3%

JSON

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.

Affected configurations

NVD
Node
linux-nfsnfs-utilsRange≤1.2.7
OR
linux-nfsnfs-utilsMatch1.2.0
OR
linux-nfsnfs-utilsMatch1.2.1
OR
linux-nfsnfs-utilsMatch1.2.2
OR
linux-nfsnfs-utilsMatch1.2.3
OR
linux-nfsnfs-utilsMatch1.2.4
OR
linux-nfsnfs-utilsMatch1.2.5
OR
linux-nfsnfs-utilsMatch1.2.6

Related

nessus 10
gentoo 1
mageia 1
cvelist 1
ubuntucve 1
prion 1
openvas 5
debiancve 1
cve 1
securityvulns 2
nessus
nessus
Mandriva Linux Security Advisory : nfs-utils (MDVSA-2013:178)
2013-06-26 00:00:00
GLSA-201412-02 : nfs-utils: Information disclosure
2014-12-09 00:00:00
openSUSE Security Update : nfs-utils (openSUSE-SU-2013:1012-1)
2014-06-13 00:00:00
gentoo
gentoo
nfs-utils: Information disclosure
2014-12-08 00:00:00
mageia
mageia
Updated nfs-utils packages fix security vulnerability
2013-06-19 14:32:49
cvelist
cvelist
CVE-2013-1923
2014-01-21 18:00:00
ubuntucve
ubuntucve
CVE-2013-1923
2014-01-21 00:00:00
prion
prion
Authentication flaw
2014-01-21 18:55:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:1668-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0821-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0822-1)
2021-06-09 00:00:00
debiancve
debiancve
CVE-2013-1923
2014-01-21 18:55:09
cve
cve
CVE-2013-1923
2014-01-21 18:55:09
securityvulns
securityvulns
[ MDVSA-2013:178 ] nfs-utils
2013-07-01 00:00:00
nfs-utils rpc.gssd privilege escalation
2013-07-01 00:00:00

3.2 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.3%

JSON
Related for NVD:CVE-2013-1923
nessus10gentoo1mageia1cvelist1ubuntucve1prion1openvas5debiancve1cve1securityvulns2