PRIOn knowledge basePRION:CVE-2013-1923Authentication flaw
6.8 Medium
AI Score
Confidence
Low
3.2 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:H/Au:N/C:P/I:P/A:N
0.006 Low
EPSS
Percentile
78.7%
rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.
References
lists.opensuse.org/opensuse-updates/2013-06/msg00142.html
lists.opensuse.org/opensuse-updates/2013-06/msg00146.html
lists.opensuse.org/opensuse-updates/2013-06/msg00172.html
www.securityfocus.com/bid/58854
bugzilla.redhat.com/show_bug.cgi?id=948072
exchange.xforce.ibmcloud.com/vulnerabilities/85331
marc.info/?l=linux-nfs&m=136491998607561&w=2
marc.info/?l=linux-nfs&m=136500502805121&w=2
Related
6.8 Medium
AI Score
Confidence
Low
3.2 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:H/Au:N/C:P/I:P/A:N
0.006 Low
EPSS
Percentile
78.7%