Authorization Bypass

quota is vulnerable to authorization bypass. The service does not use tcpwrappers correctly and the goodclient function in rquotacvs.c invokes the hosts ctl function without a host name, which would cause certain hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny to be ignored and...

CVE-2012-3417

The goodclient function in rquotad rquotasvc.c in Linux DiskQuota aka quota before 3.17 invokes the hostsctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny...