Authorization Bypass

quota is vulnerable to authorization bypass. The service does not use tcpwrappers correctly and the goodclient function in rquotacvs.c invokes the hosts ctl function without a host name, which would cause certain hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny to be ignored and...

CVE-2012-3417

The goodclient function in rquotad rquotasvc.c in Linux DiskQuota aka quota before 3.17 invokes the hostsctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny...

CVE-2012-3417: Undefined Security Weakness

The goodclient function in rquotad rquotasvc.c in Linux DiskQuota aka quota before 3.17 invokes the hostsctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny...

CVE-2008-4552: Undefined Security Weakness

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...