CVE-2008-4552 The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups a...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nfs-utils | <= 1.1.2 | No fix listed |
| nfs-utils | = 0.2 | No fix listed |
| nfs-utils | = 0.2.1 | No fix listed |
| nfs-utils | = 0.3.1 | No fix listed |
| nfs-utils | = 0.3.3 | No fix listed |
| nfs-utils | = 1.0 | No fix listed |
| nfs-utils | = 1.0.1 | No fix listed |
| nfs-utils | = 1.0.2 | No fix listed |
| nfs-utils | = 1.0.3 | No fix listed |
| nfs-utils | = 1.0.4 | No fix listed |
| nfs-utils | = 1.0.6 | No fix listed |
| nfs-utils | = 1.0.7 | No fix listed |
| nfs-utils | = 1.0.7-pre-1 | No fix listed |
| nfs-utils | = 1.0.7-pre-2 | No fix listed |
| nfs-utils | = 1.0.8 | No fix listed |
| nfs-utils | = 1.0.8-rc-1 | No fix listed |
| nfs-utils | = 1.0.8-rc-2 | No fix listed |
| nfs-utils | = 1.0.8-rc-3 | No fix listed |
| nfs-utils | = 1.0.8-rc-4 | No fix listed |
| nfs-utils | = 1.0.9 | No fix listed |
| nfs-utils | = 1.0.10 | No fix listed |
| nfs-utils | = 1.0.11 | No fix listed |
| nfs-utils | = 1.0.12 | No fix listed |
| nfs-utils | = 1.1.0 | No fix listed |
| nfs-utils | = 1.1.0-rc-1 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nfs-utils | = 1.1.1 | No fix listed |
| debian/nfs-utils(Debian:12) | < 1:1.1.3-1 | 1:1.1.3-1 |
| debian/nfs-utils(Debian:13) | < 1:1.1.3-1 | 1:1.1.3-1 |
| debian/nfs-utils(Debian:14) | < 1:1.1.3-1 | 1:1.1.3-1 |
References
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates mailing-list
- 32346 third-party-advisory vendor-advisory
- 32481 third-party-advisory vendor-advisory
- 33006 third-party-advisory vendor-advisory
- 36538 third-party-advisory
- 38794 third-party-advisory vendor-advisory
- 38833 third-party-advisory vendor-advisory
- wiki.rpath.com
- MDVSA-2009:060 vendor-advisory
- [oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers mailing-list
- [oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers mailing-list
- RHSA-2009:1321 vendor-advisory
- 20081030 rPSA-2008-0307-1 nfs-client nfs-server nfs-utils mailing-list
- 31823 patch vdb-entry
- USN-687-1 vendor-advisory
- ADV-2010-0528 vdb-entry vendor-advisory
- bugzilla.redhat.com
- nfsutils-hostctl-security-bypass(45895) vdb-entry
- oval:org.mitre.oval:def:11544 signature vdb-entry
- oval:org.mitre.oval:def:8325 signature vdb-entry
- Debian Security Tracker CVE-2008-4552 vendor-advisory