USN-687-1: nfs-utils vulnerability

It was discovered that nfs-utils did not properly enforce netgroup restrictions when using TCP Wrappers. Remote attackers could bypass the netgroup restrictions enabled by the administrator and possibly gain access to sensitive information...

nfs-utils软件包hosts_ctl()函数绕过安全限制漏洞

BUGTRAQ ID: 31823 CVECAN ID: CVE-2008-4552 nfs-utils软件包可提供内核NFS服务器和相关工具的守护程序。 nfs-utils软件包的TCP封装程序实现用错误的参数序列调用了hostsctl函数，远程攻击者可以绕过对NFS netgroup所实施的访问控制规则，获得对受限服务的访问。 sourceforge nfs-utils 1.0.9 sourceforge ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://freshmeat.net/projects/nfs-utils/...

CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

Design/Logic Flaw

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

CVE-2008-4552

CVE-2008-4552 affects nfs-utils 1.0.9 and possibly earlier versions before 1.1.3. The good_client function calls hosts_ctl with arguments in the wrong order, causing TCP Wrappers to ignore netgroups and allow remote attackers to bypass access restrictions. This is a network-exposed issue (TCP wra...

CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

Gentoo Security Advisory GLSA 200412-08 (nfs-utils)

The remote host is missing updates announced in advisory GLSA 200412-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200412-08 (nfs-utils)

The remote host is missing updates announced in advisory GLSA 200412-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Design/Logic Flaw

A certain Red Hat build script for nfs-utils before 1.0.9-35z.el52 on Red Hat Enterprise Linux RHEL 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions...

CVE-2008-1376

A certain Red Hat build script for nfs-utils before 1.0.9-35z.el52 on Red Hat Enterprise Linux RHEL 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions...

CVE-2008-1376

A certain Red Hat build script for nfs-utils before 1.0.9-35z.el52 on Red Hat Enterprise Linux RHEL 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions...

CVE-2008-1376

CVE-2008-1376 affects the nfs-utils package prior to 1.0.9-35z.el5_2 on Red Hat Enterprise Linux 5, where a build script omission left TCP wrappers support out of the box. This omission could allow remote attackers to bypass intended access restrictions. Multiple connected advisories confirm the ...

RHEL 5 : nfs-utils (RHSA-2008:0486)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2008:0486 advisory. The nfs-utils package provides a daemon for the kernel NFS server and related tools. A flaw was found in the nfs-utils package build. The nfs-utils...

nfs security update

CentOS Errata and Security Advisory CESA-2008:0486 An updated nfs-utils package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon...

Moderate: Red Hat Security Advisory: nfs-utils security update

An updated nfs-utils package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. A fla...

nfs-utils security update

1.0.9-35z - Added the warning.patch to fix some warning which were flaged by rpmdiff during the errata phasea Errata 2008:0486 1.0.9-34z - Re-enabled tcp wrappers. bz440119...

Debian Security Advisory DSA 606-1 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory DSA 606-1. OpenVAS Vulnerability Test $Id: deb6061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 606-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...