Authorization Bypass

quota is vulnerable to authorization bypass. The service does not use tcpwrappers correctly and the goodclient function in rquotacvs.c invokes the hosts ctl function without a host name, which would cause certain hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny to be ignored and...