Lucene search

K
ubuntuUbuntuUSN-687-1
HistoryDec 04, 2008 - 12:00 a.m.

nfs-utils vulnerability

2008-12-0400:00:00
ubuntu.com
33

7.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

Releases

  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 7.10
  • Ubuntu 6.06

Packages

  • nfs-utils -

Details

It was discovered that nfs-utils did not properly enforce netgroup
restrictions when using TCP Wrappers. Remote attackers could bypass the
netgroup restrictions enabled by the administrator and possibly gain
access to sensitive information.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchnfs-kernel-server<ย 1:1.1.2-4ubuntu1.1UNKNOWN
Ubuntu8.10noarchnfs-common<ย 1:1.1.2-4ubuntu1.1UNKNOWN
Ubuntu8.04noarchnfs-kernel-server<ย 1:1.1.2-2ubuntu2.2UNKNOWN
Ubuntu8.04noarchnfs-common<ย 1:1.1.2-2ubuntu2.2UNKNOWN
Ubuntu7.10noarchnfs-kernel-server<ย 1:1.1.1~git-20070709-3ubuntu1.1UNKNOWN
Ubuntu7.10noarchnfs-common<ย 1:1.1.1~git-20070709-3ubuntu1.1UNKNOWN
Ubuntu6.06noarchnfs-kernel-server<ย 1:1.0.7-3ubuntu2.1UNKNOWN
Ubuntu6.06noarchnfs-common<ย 1:1.0.7-3ubuntu2.1UNKNOWN
Ubuntu6.06noarchnhfsstone<ย 1:1.0.7-3ubuntu2.1UNKNOWN

7.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%