Vulnerabilites related to nfs - nfs-utils
CVE-2004-0154 (GCVE-0-2004-0154)
Vulnerability from cvelistv5
Published
2004-05-12 04:00
Modified
2024-08-08 00:10
Severity ?
EPSS score ?
Summary
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt | vendor-advisory, x_refsource_TRUSTIX | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673 | vdb-entry, signature, x_refsource_OVAL | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861 | vdb-entry, signature, x_refsource_OVAL | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15418 | vdb-entry, x_refsource_XF | |
| http://www.securityfocus.com/bid/9813 | vdb-entry, x_refsource_BID | |
| http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535 | x_refsource_MISC | |
| http://www.redhat.com/support/errata/RHSA-2004-072.html | vendor-advisory, x_refsource_REDHAT |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-08T00:10:02.499Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "2004-0009", tags: [ "vendor-advisory", "x_refsource_TRUSTIX", "x_transferred", ], url: "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt", }, { name: "oval:org.mitre.oval:def:9673", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673", }, { name: "oval:org.mitre.oval:def:861", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861", }, { name: "nfs-utils-dns-dos(15418)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418", }, { name: "9813", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/9813", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535", }, { name: "RHSA-2004:072", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2004-072.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2004-03-05T00:00:00", descriptions: [ { lang: "en", value: "rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-10-10T00:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { name: "2004-0009", tags: [ "vendor-advisory", "x_refsource_TRUSTIX", ], url: "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt", }, { name: "oval:org.mitre.oval:def:9673", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673", }, { name: "oval:org.mitre.oval:def:861", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861", }, { name: "nfs-utils-dns-dos(15418)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418", }, { name: "9813", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/9813", }, { tags: [ "x_refsource_MISC", ], url: "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535", }, { name: "RHSA-2004:072", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2004-072.html", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2004-0154", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "2004-0009", refsource: "TRUSTIX", url: "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt", }, { name: "oval:org.mitre.oval:def:9673", refsource: "OVAL", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673", }, { name: "oval:org.mitre.oval:def:861", refsource: "OVAL", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861", }, { name: "nfs-utils-dns-dos(15418)", refsource: "XF", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418", }, { name: "9813", refsource: "BID", url: "http://www.securityfocus.com/bid/9813", }, { name: "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535", refsource: "MISC", url: "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535", }, { name: "RHSA-2004:072", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2004-072.html", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2004-0154", datePublished: "2004-05-12T04:00:00", dateReserved: "2004-02-13T00:00:00", dateUpdated: "2024-08-08T00:10:02.499Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2008-4552 (GCVE-0-2008-4552)
Vulnerability from cvelistv5
Published
2008-10-14 19:00
Modified
2024-08-07 10:17
Severity ?
EPSS score ?
Summary
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-07T10:17:09.906Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "32481", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/32481", }, { name: "32346", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/32346", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://wiki.rpath.com/Advisories:rPSA-2008-0307", }, { name: "oval:org.mitre.oval:def:8325", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325", }, { name: "38794", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/38794", }, { name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html", }, { name: "nfsutils-hostctl-security-bypass(45895)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895", }, { name: "RHSA-2009:1321", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2009-1321.html", }, { name: "[oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "http://www.openwall.com/lists/oss-security/2012/07/19/2", }, { name: "33006", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/33006", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=458676", }, { name: "36538", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/36538", }, { name: "[oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers", tags: [ "mailing-list", "x_refsource_MLIST", "x_transferred", ], url: "http://www.openwall.com/lists/oss-security/2012/07/19/5", }, { name: "MDVSA-2009:060", tags: [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred", ], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060", }, { name: "oval:org.mitre.oval:def:11544", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544", }, { name: "20081030 rPSA-2008-0307-1 nfs-client nfs-server nfs-utils", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/497935/100/0/threaded", }, { name: "USN-687-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred", ], url: "http://www.ubuntu.com/usn/USN-687-1", }, { name: "38833", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/38833", }, { name: "31823", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/31823", }, { name: "ADV-2010-0528", tags: [ "vdb-entry", "x_refsource_VUPEN", "x_transferred", ], url: "http://www.vupen.com/english/advisories/2010/0528", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2008-10-13T00:00:00", descriptions: [ { lang: "en", value: "The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-10-11T19:57:01", orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", shortName: "redhat", }, references: [ { name: "32481", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/32481", }, { name: "32346", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/32346", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://wiki.rpath.com/Advisories:rPSA-2008-0307", }, { name: "oval:org.mitre.oval:def:8325", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325", }, { name: "38794", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/38794", }, { name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html", }, { name: "nfsutils-hostctl-security-bypass(45895)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895", }, { name: "RHSA-2009:1321", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2009-1321.html", }, { name: "[oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "http://www.openwall.com/lists/oss-security/2012/07/19/2", }, { name: "33006", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/33006", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=458676", }, { name: "36538", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/36538", }, { name: "[oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers", tags: [ "mailing-list", "x_refsource_MLIST", ], url: "http://www.openwall.com/lists/oss-security/2012/07/19/5", }, { name: "MDVSA-2009:060", tags: [ "vendor-advisory", "x_refsource_MANDRIVA", ], url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060", }, { name: "oval:org.mitre.oval:def:11544", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544", }, { name: "20081030 rPSA-2008-0307-1 nfs-client nfs-server nfs-utils", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://www.securityfocus.com/archive/1/497935/100/0/threaded", }, { name: "USN-687-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", ], url: "http://www.ubuntu.com/usn/USN-687-1", }, { name: "38833", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/38833", }, { name: "31823", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/31823", }, { name: "ADV-2010-0528", tags: [ "vdb-entry", "x_refsource_VUPEN", ], url: "http://www.vupen.com/english/advisories/2010/0528", }, ], }, }, cveMetadata: { assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", assignerShortName: "redhat", cveId: "CVE-2008-4552", datePublished: "2008-10-14T19:00:00", dateReserved: "2008-10-14T00:00:00", dateUpdated: "2024-08-07T10:17:09.906Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2009-0180 (GCVE-0-2009-0180)
Vulnerability from cvelistv5
Published
2009-01-20 16:00
Modified
2024-08-07 04:24
Severity ?
EPSS score ?
Summary
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.
References
| ▼ | URL | Tags |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=477864 | x_refsource_CONFIRM | |
| http://www.securityfocus.com/bid/33294 | vdb-entry, x_refsource_BID | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/48058 | vdb-entry, x_refsource_XF | |
| https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html | vendor-advisory, x_refsource_FEDORA | |
| https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html | vendor-advisory, x_refsource_FEDORA | |
| http://secunia.com/advisories/33545 | third-party-advisory, x_refsource_SECUNIA |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-07T04:24:18.164Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=477864", }, { name: "33294", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/33294", }, { name: "nfsutils-tcpwrapper-security-bypass(48058)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058", }, { name: "FEDORA-2009-0297", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html", }, { name: "FEDORA-2009-0266", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html", }, { name: "33545", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/33545", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2009-01-14T00:00:00", descriptions: [ { lang: "en", value: "Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-08-07T12:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "https://bugzilla.redhat.com/show_bug.cgi?id=477864", }, { name: "33294", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/33294", }, { name: "nfsutils-tcpwrapper-security-bypass(48058)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058", }, { name: "FEDORA-2009-0297", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html", }, { name: "FEDORA-2009-0266", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html", }, { name: "33545", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/33545", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2009-0180", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://bugzilla.redhat.com/show_bug.cgi?id=477864", refsource: "CONFIRM", url: "https://bugzilla.redhat.com/show_bug.cgi?id=477864", }, { name: "33294", refsource: "BID", url: "http://www.securityfocus.com/bid/33294", }, { name: "nfsutils-tcpwrapper-security-bypass(48058)", refsource: "XF", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058", }, { name: "FEDORA-2009-0297", refsource: "FEDORA", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html", }, { name: "FEDORA-2009-0266", refsource: "FEDORA", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html", }, { name: "33545", refsource: "SECUNIA", url: "http://secunia.com/advisories/33545", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2009-0180", datePublished: "2009-01-20T16:00:00", dateReserved: "2009-01-20T00:00:00", dateUpdated: "2024-08-07T04:24:18.164Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2003-0252 (GCVE-0-2003-0252)
Vulnerability from cvelistv5
Published
2003-07-15 04:00
Modified
2024-08-08 01:50
Severity ?
EPSS score ?
Summary
Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-08T01:50:46.930Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "1001262", tags: [ "vendor-advisory", "x_refsource_SUNALERT", "x_transferred", ], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1", }, { name: "RHSA-2003:206", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2003-206.html", }, { name: "8179", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/8179", }, { name: "20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=105839032403325&w=2", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt", }, { name: "TLSA-2003-44", tags: [ "vendor-advisory", "x_refsource_TURBO", "x_transferred", ], url: "http://www.turbolinux.com/security/TLSA-2003-44.txt", }, { name: "RHSA-2003:207", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2003-207.html", }, { name: "20030714 Linux nfs-utils xlog() off-by-one bug", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=105820223707191&w=2", }, { name: "1007187", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://securitytracker.com/id?1007187", }, { name: "20030714 Reality of the rpc.mountd bug", tags: [ "mailing-list", "x_refsource_VULNWATCH", "x_transferred", ], url: "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html", }, { name: "MDKSA-2003:076", tags: [ "vendor-advisory", "x_refsource_MANDRAKE", "x_transferred", ], url: "http://www.mandriva.com/security/advisories?name=MDKSA-2003:076", }, { name: "20030714 Linux nfs-utils xlog() off-by-one bug", tags: [ "mailing-list", "x_refsource_VULNWATCH", "x_transferred", ], url: "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html", }, { name: "20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b)", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://marc.info/?l=bugtraq&m=105830921519513&w=2", }, { name: "9259", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/9259", }, { name: "nfs-utils-offbyone-bo(12600)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/12600", }, { name: "oval:org.mitre.oval:def:443", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443", }, { name: "VU#258564", tags: [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred", ], url: "http://www.kb.cert.org/vuls/id/258564", }, { name: "SuSE-SA:2003:031", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html", }, { name: "DSA-349", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2003/dsa-349", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2003-07-14T00:00:00", descriptions: [ { lang: "en", value: "Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-10-10T00:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { name: "1001262", tags: [ "vendor-advisory", "x_refsource_SUNALERT", ], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1", }, { name: "RHSA-2003:206", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2003-206.html", }, { name: "8179", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/8179", }, { name: "20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://marc.info/?l=bugtraq&m=105839032403325&w=2", }, { tags: [ "x_refsource_MISC", ], url: "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt", }, { name: "TLSA-2003-44", tags: [ "vendor-advisory", "x_refsource_TURBO", ], url: "http://www.turbolinux.com/security/TLSA-2003-44.txt", }, { name: "RHSA-2003:207", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2003-207.html", }, { name: "20030714 Linux nfs-utils xlog() off-by-one bug", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://marc.info/?l=bugtraq&m=105820223707191&w=2", }, { name: "1007187", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://securitytracker.com/id?1007187", }, { name: "20030714 Reality of the rpc.mountd bug", tags: [ "mailing-list", "x_refsource_VULNWATCH", ], url: "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html", }, { name: "MDKSA-2003:076", tags: [ "vendor-advisory", "x_refsource_MANDRAKE", ], url: "http://www.mandriva.com/security/advisories?name=MDKSA-2003:076", }, { name: "20030714 Linux nfs-utils xlog() off-by-one bug", tags: [ "mailing-list", "x_refsource_VULNWATCH", ], url: "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html", }, { name: "20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b)", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://marc.info/?l=bugtraq&m=105830921519513&w=2", }, { name: "9259", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/9259", }, { name: "nfs-utils-offbyone-bo(12600)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/12600", }, { name: "oval:org.mitre.oval:def:443", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443", }, { name: "VU#258564", tags: [ "third-party-advisory", "x_refsource_CERT-VN", ], url: "http://www.kb.cert.org/vuls/id/258564", }, { name: "SuSE-SA:2003:031", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html", }, { name: "DSA-349", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2003/dsa-349", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2003-0252", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "1001262", refsource: "SUNALERT", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1", }, { name: "RHSA-2003:206", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2003-206.html", }, { name: "8179", refsource: "BID", url: "http://www.securityfocus.com/bid/8179", }, { name: "20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq", refsource: "BUGTRAQ", url: "http://marc.info/?l=bugtraq&m=105839032403325&w=2", }, { name: "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt", refsource: "MISC", url: "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt", }, { name: "TLSA-2003-44", refsource: "TURBO", url: "http://www.turbolinux.com/security/TLSA-2003-44.txt", }, { name: "RHSA-2003:207", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2003-207.html", }, { name: "20030714 Linux nfs-utils xlog() off-by-one bug", refsource: "BUGTRAQ", url: "http://marc.info/?l=bugtraq&m=105820223707191&w=2", }, { name: "1007187", refsource: "SECTRACK", url: "http://securitytracker.com/id?1007187", }, { name: "20030714 Reality of the rpc.mountd bug", refsource: "VULNWATCH", url: "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html", }, { name: "MDKSA-2003:076", refsource: "MANDRAKE", url: "http://www.mandriva.com/security/advisories?name=MDKSA-2003:076", }, { name: "20030714 Linux nfs-utils xlog() off-by-one bug", refsource: "VULNWATCH", url: "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html", }, { name: "20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b)", refsource: "BUGTRAQ", url: "http://marc.info/?l=bugtraq&m=105830921519513&w=2", }, { name: "9259", refsource: "SECUNIA", url: "http://secunia.com/advisories/9259", }, { name: "nfs-utils-offbyone-bo(12600)", refsource: "XF", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/12600", }, { name: "oval:org.mitre.oval:def:443", refsource: "OVAL", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443", }, { name: "VU#258564", refsource: "CERT-VN", url: "http://www.kb.cert.org/vuls/id/258564", }, { name: "SuSE-SA:2003:031", refsource: "SUSE", url: "http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html", }, { name: "DSA-349", refsource: "DEBIAN", url: "http://www.debian.org/security/2003/dsa-349", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2003-0252", datePublished: "2003-07-15T04:00:00", dateReserved: "2003-05-06T00:00:00", dateUpdated: "2024-08-08T01:50:46.930Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2004-0946 (GCVE-0-2004-0946)
Vulnerability from cvelistv5
Published
2004-12-22 05:00
Modified
2024-08-08 00:31
Severity ?
EPSS score ?
Summary
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
References
| ▼ | URL | Tags |
|---|---|---|
| http://bugs.gentoo.org/show_bug.cgi?id=72113 | x_refsource_MISC | |
| http://www.redhat.com/support/errata/RHSA-2005-014.html | vendor-advisory, x_refsource_REDHAT | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18455 | vdb-entry, x_refsource_XF | |
| http://www.kb.cert.org/vuls/id/698302 | third-party-advisory, x_refsource_CERT-VN | |
| http://www.redhat.com/support/errata/RHSA-2004-583.html | vendor-advisory, x_refsource_REDHAT | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464 | vdb-entry, signature, x_refsource_OVAL | |
| http://www.securityfocus.com/archive/1/426072/30/6740/threaded | vendor-advisory, x_refsource_FEDORA | |
| http://secunia.com/advisories/13440/ | third-party-advisory, x_refsource_SECUNIA | |
| http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml | vendor-advisory, x_refsource_GENTOO | |
| http://www.mandriva.com/security/advisories?name=MDKSA-2005:005 | vendor-advisory, x_refsource_MANDRAKE | |
| http://www.securityfocus.com/bid/11911 | vdb-entry, x_refsource_BID |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-08T00:31:48.229Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://bugs.gentoo.org/show_bug.cgi?id=72113", }, { name: "RHSA-2005:014", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { name: "nfsutils-getquotainfo-bo(18455)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455", }, { name: "VU#698302", tags: [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred", ], url: "http://www.kb.cert.org/vuls/id/698302", }, { name: "RHSA-2004:583", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { name: "oval:org.mitre.oval:def:10464", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464", }, { name: "FLSA-2006:138098", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { name: "13440", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/13440/", }, { name: "GLSA-200412-08", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml", }, { name: "MDKSA-2005:005", tags: [ "vendor-advisory", "x_refsource_MANDRAKE", "x_transferred", ], url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005", }, { name: "11911", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/11911", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2004-12-14T00:00:00", descriptions: [ { lang: "en", value: "rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-10-19T14:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_MISC", ], url: "http://bugs.gentoo.org/show_bug.cgi?id=72113", }, { name: "RHSA-2005:014", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { name: "nfsutils-getquotainfo-bo(18455)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455", }, { name: "VU#698302", tags: [ "third-party-advisory", "x_refsource_CERT-VN", ], url: "http://www.kb.cert.org/vuls/id/698302", }, { name: "RHSA-2004:583", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { name: "oval:org.mitre.oval:def:10464", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464", }, { name: "FLSA-2006:138098", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { name: "13440", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/13440/", }, { name: "GLSA-200412-08", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml", }, { name: "MDKSA-2005:005", tags: [ "vendor-advisory", "x_refsource_MANDRAKE", ], url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005", }, { name: "11911", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/11911", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2004-0946", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://bugs.gentoo.org/show_bug.cgi?id=72113", refsource: "MISC", url: "http://bugs.gentoo.org/show_bug.cgi?id=72113", }, { name: "RHSA-2005:014", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { name: "nfsutils-getquotainfo-bo(18455)", refsource: "XF", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455", }, { name: "VU#698302", refsource: "CERT-VN", url: "http://www.kb.cert.org/vuls/id/698302", }, { name: "RHSA-2004:583", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { name: "oval:org.mitre.oval:def:10464", refsource: "OVAL", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464", }, { name: "FLSA-2006:138098", refsource: "FEDORA", url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { name: "13440", refsource: "SECUNIA", url: "http://secunia.com/advisories/13440/", }, { name: "GLSA-200412-08", refsource: "GENTOO", url: "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml", }, { name: "MDKSA-2005:005", refsource: "MANDRAKE", url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005", }, { name: "11911", refsource: "BID", url: "http://www.securityfocus.com/bid/11911", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2004-0946", datePublished: "2004-12-22T05:00:00", dateReserved: "2004-10-12T00:00:00", dateUpdated: "2024-08-08T00:31:48.229Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
CVE-2004-1014 (GCVE-0-2004-1014)
Vulnerability from cvelistv5
Published
2004-12-08 05:00
Modified
2024-08-08 00:38
Severity ?
EPSS score ?
Summary
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.debian.org/security/2004/dsa-606 | vendor-advisory, x_refsource_DEBIAN | |
| http://www.redhat.com/support/errata/RHSA-2005-014.html | vendor-advisory, x_refsource_REDHAT | |
| http://www.redhat.com/support/errata/RHSA-2004-583.html | vendor-advisory, x_refsource_REDHAT | |
| http://www.securityfocus.com/bid/11785 | vdb-entry, x_refsource_BID | |
| http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup | x_refsource_CONFIRM | |
| http://www.securityfocus.com/archive/1/426072/30/6740/threaded | vendor-advisory, x_refsource_FEDORA | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899 | vdb-entry, signature, x_refsource_OVAL | |
| https://www.ubuntu.com/usn/usn-36-1/ | vendor-advisory, x_refsource_UBUNTU | |
| http://www.trustix.org/errata/2004/0065/ | vendor-advisory, x_refsource_TRUSTIX | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18332 | vdb-entry, x_refsource_XF |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-08T00:38:59.824Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "DSA-606", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2004/dsa-606", }, { name: "RHSA-2005:014", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { name: "RHSA-2004:583", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { name: "11785", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/11785", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup", }, { name: "FLSA-2006:138098", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { name: "oval:org.mitre.oval:def:10899", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899", }, { name: "USN-36-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred", ], url: "https://www.ubuntu.com/usn/usn-36-1/", }, { name: "2004-0065", tags: [ "vendor-advisory", "x_refsource_TRUSTIX", "x_transferred", ], url: "http://www.trustix.org/errata/2004/0065/", }, { name: "nfs-utils-statd-dos(18332)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2004-12-01T00:00:00", descriptions: [ { lang: "en", value: "statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-10-19T14:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { name: "DSA-606", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2004/dsa-606", }, { name: "RHSA-2005:014", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { name: "RHSA-2004:583", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { name: "11785", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/11785", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup", }, { name: "FLSA-2006:138098", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { name: "oval:org.mitre.oval:def:10899", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899", }, { name: "USN-36-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", ], url: "https://www.ubuntu.com/usn/usn-36-1/", }, { name: "2004-0065", tags: [ "vendor-advisory", "x_refsource_TRUSTIX", ], url: "http://www.trustix.org/errata/2004/0065/", }, { name: "nfs-utils-statd-dos(18332)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2004-1014", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "DSA-606", refsource: "DEBIAN", url: "http://www.debian.org/security/2004/dsa-606", }, { name: "RHSA-2005:014", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { name: "RHSA-2004:583", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { name: "11785", refsource: "BID", url: "http://www.securityfocus.com/bid/11785", }, { name: "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup", refsource: "CONFIRM", url: "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup", }, { name: "FLSA-2006:138098", refsource: "FEDORA", url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { name: "oval:org.mitre.oval:def:10899", refsource: "OVAL", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899", }, { name: "USN-36-1", refsource: "UBUNTU", url: "https://www.ubuntu.com/usn/usn-36-1/", }, { name: "2004-0065", refsource: "TRUSTIX", url: "http://www.trustix.org/errata/2004/0065/", }, { name: "nfs-utils-statd-dos(18332)", refsource: "XF", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2004-1014", datePublished: "2004-12-08T05:00:00", dateReserved: "2004-11-04T00:00:00", dateUpdated: "2024-08-08T00:38:59.824Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2004-06-14 04:00
Modified
2025-04-03 01:03
Severity ?
Summary
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*", matchCriteriaId: "813B76CA-5083-4697-A484-435113B7FF88", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "0964EDA2-D86C-4189-9B03-61A292601649", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*", matchCriteriaId: "2EFD8CFB-A24A-49F0-856C-4B985E203C9A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*", matchCriteriaId: "D4645DF7-A5C2-4E8D-A07F-22F77670D68F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "A8616115-30AC-4160-B196-D417AF32C7C7", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.", }, { lang: "es", value: "rpc.mountd en nfs-utils posteriores a 1.0.3 y anteriores a 1.0.6 permite a atacantes causar una denegación de servicio (caída) mediante el montaje de un directorio de un cliente cuya consulta DNS inversa es distinta de la consulta directa.", }, ], id: "CVE-2004-0154", lastModified: "2025-04-03T01:03:51.193", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2004-06-14T04:00:00.000", references: [ { source: "cve@mitre.org", tags: [ "Exploit", "Vendor Advisory", ], url: "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.redhat.com/support/errata/RHSA-2004-072.html", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.securityfocus.com/bid/9813", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt", }, { source: "cve@mitre.org", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418", }, { source: "cve@mitre.org", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861", }, { source: "cve@mitre.org", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Exploit", "Vendor Advisory", ], url: "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.redhat.com/support/errata/RHSA-2004-072.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.securityfocus.com/bid/9813", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-Other", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2005-01-10 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nfs | nfs-utils | 1.0.6 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| mandrakesoft | mandrake_linux | 9.2 | |
| mandrakesoft | mandrake_linux | 9.2 | |
| mandrakesoft | mandrake_linux | 10.0 | |
| mandrakesoft | mandrake_linux | 10.0 | |
| mandrakesoft | mandrake_linux | 10.1 | |
| mandrakesoft | mandrake_linux | 10.1 | |
| mandrakesoft | mandrake_linux_corporate_server | 2.1 | |
| mandrakesoft | mandrake_linux_corporate_server | 2.1 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux_desktop | 3.0 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "A8616115-30AC-4160-B196-D417AF32C7C7", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*", matchCriteriaId: "2CAE037F-111C-4A76-8FFE-716B74D65EF3", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*", matchCriteriaId: "A6B060E4-B5A6-4469-828E-211C52542547", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*", matchCriteriaId: "974C3541-990C-4CD4-A05A-38FA74A84632", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*", matchCriteriaId: "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*", matchCriteriaId: "58792F77-B06F-4780-BA25-FE1EE6C3FDD9", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*", matchCriteriaId: "C9419322-572F-4BB6-8416-C5E96541CF33", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*", matchCriteriaId: "BFC50555-C084-46A3-9C9F-949C5E3BB448", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*", matchCriteriaId: "9C25D6E1-D283-4CEA-B47B-60C47A5C0797", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*", matchCriteriaId: "AD18A446-C634-417E-86AC-B19B6DDDC856", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*", matchCriteriaId: "E4BB852E-61B2-4842-989F-C6C0C901A8D7", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*", matchCriteriaId: "24DD9D59-E2A2-4116-A887-39E8CC2004FC", vulnerable: true, }, { criteria: "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*", matchCriteriaId: "F28D7457-607E-4E0C-909A-413F91CFCD82", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*", matchCriteriaId: "4177C378-7729-46AB-B49B-C6DAED3200E7", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*", matchCriteriaId: "2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*", matchCriteriaId: "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*", matchCriteriaId: "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*", matchCriteriaId: "3528DABD-B821-4D23-AE12-614A9CA92C46", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*", matchCriteriaId: "9E661D58-18DF-4CCF-9892-F873618F4535", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*", matchCriteriaId: "E0F0D201-B1DC-4024-AF77-A284673618F3", vulnerable: true, }, { criteria: "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*", matchCriteriaId: "052E3862-BFB7-42E7-889D-8590AFA8EF37", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*", matchCriteriaId: "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*", matchCriteriaId: "EC79FF22-2664-4C40-B0B3-6D23B5F45162", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*", matchCriteriaId: "0EFE2E73-9536-41A9-B83B-0A06B54857F4", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*", matchCriteriaId: "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.", }, { lang: "es", value: "statd en nfs-utils 1.257 y anteriores hace caso a la señal SIGPIPE, lo que permite a atacanes remotos causar una denegación de servicio (caída de proceso de servidor) mediante una conexión TCP que es terminada prematuramente.", }, ], id: "CVE-2004-1014", lastModified: "2025-04-03T01:03:51.193", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2005-01-10T05:00:00.000", references: [ { source: "cve@mitre.org", url: "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup", }, { source: "cve@mitre.org", url: "http://www.debian.org/security/2004/dsa-606", }, { source: "cve@mitre.org", url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { source: "cve@mitre.org", url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { source: "cve@mitre.org", url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.securityfocus.com/bid/11785", }, { source: "cve@mitre.org", url: "http://www.trustix.org/errata/2004/0065/", }, { source: "cve@mitre.org", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332", }, { source: "cve@mitre.org", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899", }, { source: "cve@mitre.org", url: "https://www.ubuntu.com/usn/usn-36-1/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2004/dsa-606", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.securityfocus.com/bid/11785", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.trustix.org/errata/2004/0065/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.ubuntu.com/usn/usn-36-1/", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-Other", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2008-10-14 20:00
Modified
2025-04-09 00:30
Severity ?
Summary
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nfs | nfs-utils | * | |
| nfs | nfs-utils | 0.2 | |
| nfs | nfs-utils | 0.2.1 | |
| nfs | nfs-utils | 0.3.1 | |
| nfs | nfs-utils | 0.3.3 | |
| nfs | nfs-utils | 1.0 | |
| nfs | nfs-utils | 1.0.1 | |
| nfs | nfs-utils | 1.0.2 | |
| nfs | nfs-utils | 1.0.3 | |
| nfs | nfs-utils | 1.0.4 | |
| nfs | nfs-utils | 1.0.6 | |
| nfs | nfs-utils | 1.0.7 | |
| nfs | nfs-utils | 1.0.7 | |
| nfs | nfs-utils | 1.0.7 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.9 | |
| nfs | nfs-utils | 1.0.10 | |
| nfs | nfs-utils | 1.0.11 | |
| nfs | nfs-utils | 1.0.12 | |
| nfs | nfs-utils | 1.1.0 | |
| nfs | nfs-utils | 1.1.0 | |
| nfs | nfs-utils | 1.1.1 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*", matchCriteriaId: "45AEA724-343E-4806-ACCE-2AA5F8F8BAAA", versionEndIncluding: "1.1.2", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*", matchCriteriaId: "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*", matchCriteriaId: "474B82D5-5D48-41ED-B2C1-68907A27491F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*", matchCriteriaId: "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*", matchCriteriaId: "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*", matchCriteriaId: "813B76CA-5083-4697-A484-435113B7FF88", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "0964EDA2-D86C-4189-9B03-61A292601649", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*", matchCriteriaId: "F83865C7-D7A1-4357-8C15-9865BDECD98C", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*", matchCriteriaId: "2EFD8CFB-A24A-49F0-856C-4B985E203C9A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*", matchCriteriaId: "D4645DF7-A5C2-4E8D-A07F-22F77670D68F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "A8616115-30AC-4160-B196-D417AF32C7C7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*", matchCriteriaId: "1234E468-8DC6-4474-8B3D-DB550AA801B7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*", matchCriteriaId: "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*", matchCriteriaId: "63515439-6FCC-43D7-B8DD-D14DD4D7878E", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*", matchCriteriaId: "38E96A1E-5A28-4177-A26F-F19573A17775", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*", matchCriteriaId: "8A54F7D1-A1CD-4804-B962-BC536602F6B0", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*", matchCriteriaId: "2D1E56AB-B263-42AF-9034-D20AD604E50D", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*", matchCriteriaId: "0D76C312-3E5D-4176-8691-DD8C21C6A5E7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*", matchCriteriaId: "D39D0EDE-8D14-42F7-BAEF-A64D559DE495", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*", matchCriteriaId: "9BDF2DB8-0570-43C1-9206-14CDD027EBFD", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*", matchCriteriaId: "D18EC9F4-50E7-4974-906E-09533BC7722C", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*", matchCriteriaId: "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*", matchCriteriaId: "8A54C8D7-D142-4DB5-8453-57E8612BFFC8", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*", matchCriteriaId: "A4CED17F-B9CE-46D2-8F00-8419451E51FD", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*", matchCriteriaId: "D0571302-7EC5-41D3-BBAE-821657A56BED", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*", matchCriteriaId: "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.", }, { lang: "es", value: "La función good_client en nfs-utils versión 1.0.9, y posiblemente otras versiones anteriores a 1.1.3, invoca la función hosts_ctl con el orden incorrecto de argumentos, lo que causa que la TCP Wrappers ignore los netgroups y permita a los atacantes remotos omitir las restricciones de acceso previstas.", }, ], id: "CVE-2008-4552", lastModified: "2025-04-09T00:30:58.490", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: true, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2008-10-14T20:00:01.667", references: [ { source: "secalert@redhat.com", url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/32346", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/32481", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/33006", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/36538", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/38794", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/38833", }, { source: "secalert@redhat.com", url: "http://wiki.rpath.com/Advisories:rPSA-2008-0307", }, { source: "secalert@redhat.com", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060", }, { source: "secalert@redhat.com", url: "http://www.openwall.com/lists/oss-security/2012/07/19/2", }, { source: "secalert@redhat.com", url: "http://www.openwall.com/lists/oss-security/2012/07/19/5", }, { source: "secalert@redhat.com", url: "http://www.redhat.com/support/errata/RHSA-2009-1321.html", }, { source: "secalert@redhat.com", url: "http://www.securityfocus.com/archive/1/497935/100/0/threaded", }, { source: "secalert@redhat.com", tags: [ "Patch", ], url: "http://www.securityfocus.com/bid/31823", }, { source: "secalert@redhat.com", url: "http://www.ubuntu.com/usn/USN-687-1", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://www.vupen.com/english/advisories/2010/0528", }, { source: "secalert@redhat.com", url: "https://bugzilla.redhat.com/show_bug.cgi?id=458676", }, { source: "secalert@redhat.com", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895", }, { source: "secalert@redhat.com", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544", }, { source: "secalert@redhat.com", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/32346", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/32481", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/33006", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/36538", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/38794", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/38833", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://wiki.rpath.com/Advisories:rPSA-2008-0307", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.openwall.com/lists/oss-security/2012/07/19/2", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.openwall.com/lists/oss-security/2012/07/19/5", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2009-1321.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/497935/100/0/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", ], url: "http://www.securityfocus.com/bid/31823", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.ubuntu.com/usn/USN-687-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://www.vupen.com/english/advisories/2010/0528", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugzilla.redhat.com/show_bug.cgi?id=458676", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325", }, ], sourceIdentifier: "secalert@redhat.com", vendorComments: [ { comment: "This issue affected Red Hat Enterprise Linux 5 and was addressed by\nhttps://rhn.redhat.com/errata/RHSA-2009-1321.html\n", lastModified: "2009-09-02T00:00:00", organization: "Red Hat", }, ], vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "CWE-264", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2005-01-10 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nfs | nfs-utils | 1.0 | |
| nfs | nfs-utils | 1.0.1 | |
| nfs | nfs-utils | 1.0.2 | |
| nfs | nfs-utils | 1.0.3 | |
| nfs | nfs-utils | 1.0.4 | |
| nfs | nfs-utils | 1.0.6 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux_desktop | 3.0 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*", matchCriteriaId: "813B76CA-5083-4697-A484-435113B7FF88", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "0964EDA2-D86C-4189-9B03-61A292601649", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*", matchCriteriaId: "F83865C7-D7A1-4357-8C15-9865BDECD98C", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*", matchCriteriaId: "2EFD8CFB-A24A-49F0-856C-4B985E203C9A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*", matchCriteriaId: "D4645DF7-A5C2-4E8D-A07F-22F77670D68F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "A8616115-30AC-4160-B196-D417AF32C7C7", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*", matchCriteriaId: "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*", matchCriteriaId: "EC79FF22-2664-4C40-B0B3-6D23B5F45162", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*", matchCriteriaId: "0EFE2E73-9536-41A9-B83B-0A06B54857F4", vulnerable: true, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*", matchCriteriaId: "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.", }, { lang: "es", value: "rquotad en nfs-utils (rquota_server.c) anteriores a 1.0.6-r6 en arquitecturas de 64 bits no realiza una conversión de enteros adecuadamente, lo que conduce a un desbordamiento de búfer basado en la pila y permite a atacantes remotos ejecutar código arbitrario mediante una petición NFS artesanal.", }, ], id: "CVE-2004-0946", lastModified: "2025-04-03T01:03:51.193", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 10, impactScore: 10, obtainAllPrivilege: true, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2005-01-10T05:00:00.000", references: [ { source: "cve@mitre.org", url: "http://bugs.gentoo.org/show_bug.cgi?id=72113", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/13440/", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml", }, { source: "cve@mitre.org", tags: [ "US Government Resource", ], url: "http://www.kb.cert.org/vuls/id/698302", }, { source: "cve@mitre.org", url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { source: "cve@mitre.org", url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { source: "cve@mitre.org", url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.securityfocus.com/bid/11911", }, { source: "cve@mitre.org", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455", }, { source: "cve@mitre.org", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://bugs.gentoo.org/show_bug.cgi?id=72113", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/13440/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "US Government Resource", ], url: "http://www.kb.cert.org/vuls/id/698302", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.redhat.com/support/errata/RHSA-2004-583.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2005-014.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/426072/30/6740/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.securityfocus.com/bid/11911", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-Other", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2009-01-20 16:30
Modified
2025-04-09 00:30
Severity ?
Summary
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*", matchCriteriaId: "45AEA724-343E-4806-ACCE-2AA5F8F8BAAA", versionEndIncluding: "1.1.2", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*", matchCriteriaId: "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*", matchCriteriaId: "474B82D5-5D48-41ED-B2C1-68907A27491F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*", matchCriteriaId: "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*", matchCriteriaId: "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*", matchCriteriaId: "813B76CA-5083-4697-A484-435113B7FF88", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "0964EDA2-D86C-4189-9B03-61A292601649", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*", matchCriteriaId: "F83865C7-D7A1-4357-8C15-9865BDECD98C", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*", matchCriteriaId: "2EFD8CFB-A24A-49F0-856C-4B985E203C9A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*", matchCriteriaId: "D4645DF7-A5C2-4E8D-A07F-22F77670D68F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "A8616115-30AC-4160-B196-D417AF32C7C7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*", matchCriteriaId: "1234E468-8DC6-4474-8B3D-DB550AA801B7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*", matchCriteriaId: "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*", matchCriteriaId: "63515439-6FCC-43D7-B8DD-D14DD4D7878E", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*", matchCriteriaId: "38E96A1E-5A28-4177-A26F-F19573A17775", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*", matchCriteriaId: "8A54F7D1-A1CD-4804-B962-BC536602F6B0", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*", matchCriteriaId: "2D1E56AB-B263-42AF-9034-D20AD604E50D", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*", matchCriteriaId: "0D76C312-3E5D-4176-8691-DD8C21C6A5E7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*", matchCriteriaId: "D39D0EDE-8D14-42F7-BAEF-A64D559DE495", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*", matchCriteriaId: "9BDF2DB8-0570-43C1-9206-14CDD027EBFD", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*", matchCriteriaId: "D18EC9F4-50E7-4974-906E-09533BC7722C", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*", matchCriteriaId: "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*", matchCriteriaId: "8A54C8D7-D142-4DB5-8453-57E8612BFFC8", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*", matchCriteriaId: "A4CED17F-B9CE-46D2-8F00-8419451E51FD", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*", matchCriteriaId: "D0571302-7EC5-41D3-BBAE-821657A56BED", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*", matchCriteriaId: "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*", matchCriteriaId: "D32A30CD-EA21-4AA6-868F-3448AA50B70D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*", matchCriteriaId: "6D7165E8-FC10-4A4F-9B58-49CA830D2DA8", versionEndIncluding: "1.1.4", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*", matchCriteriaId: "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*", matchCriteriaId: "474B82D5-5D48-41ED-B2C1-68907A27491F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*", matchCriteriaId: "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*", matchCriteriaId: "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*", matchCriteriaId: "813B76CA-5083-4697-A484-435113B7FF88", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "0964EDA2-D86C-4189-9B03-61A292601649", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*", matchCriteriaId: "F83865C7-D7A1-4357-8C15-9865BDECD98C", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*", matchCriteriaId: "2EFD8CFB-A24A-49F0-856C-4B985E203C9A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*", matchCriteriaId: "D4645DF7-A5C2-4E8D-A07F-22F77670D68F", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "A8616115-30AC-4160-B196-D417AF32C7C7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*", matchCriteriaId: "1234E468-8DC6-4474-8B3D-DB550AA801B7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*", matchCriteriaId: "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*", matchCriteriaId: "63515439-6FCC-43D7-B8DD-D14DD4D7878E", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*", matchCriteriaId: "38E96A1E-5A28-4177-A26F-F19573A17775", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*", matchCriteriaId: "8A54F7D1-A1CD-4804-B962-BC536602F6B0", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*", matchCriteriaId: "2D1E56AB-B263-42AF-9034-D20AD604E50D", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*", matchCriteriaId: "0D76C312-3E5D-4176-8691-DD8C21C6A5E7", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*", matchCriteriaId: "D39D0EDE-8D14-42F7-BAEF-A64D559DE495", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*", matchCriteriaId: "9BDF2DB8-0570-43C1-9206-14CDD027EBFD", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*", matchCriteriaId: "D18EC9F4-50E7-4974-906E-09533BC7722C", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*", matchCriteriaId: "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*", matchCriteriaId: "8A54C8D7-D142-4DB5-8453-57E8612BFFC8", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*", matchCriteriaId: "A4CED17F-B9CE-46D2-8F00-8419451E51FD", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*", matchCriteriaId: "D0571302-7EC5-41D3-BBAE-821657A56BED", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*", matchCriteriaId: "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.2:*:*:*:*:*:*:*", matchCriteriaId: "F202B0A0-9EDE-4311-88E5-DC4411034457", vulnerable: true, }, { criteria: "cpe:2.3:a:nfs:nfs-utils:1.1.3:*:*:*:*:*:*:*", matchCriteriaId: "3F632663-FAAF-4780-9225-DEF175B803FB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*", matchCriteriaId: "BA70E035-8475-4046-ABD7-5AE59F874EBA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.", }, { lang: "es", value: "Algunos Fedora crean secuencias de comando para nfs-utils anteriores a v1.1.2-9.fc9 en Fedora 9, y anteriores a v1.1.4-6.fc10 en Fedora 10, no da soporte a TCP Wrapper, lo que podría permitir a atacantes remotos evitar \r\nlas restricciones de acceso previstas, posiblemente esté relacionado con el caso CVE-2008-1376.", }, ], id: "CVE-2009-0180", lastModified: "2025-04-09T00:30:58.490", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: true, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2009-01-20T16:30:00.467", references: [ { source: "cve@mitre.org", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/33545", }, { source: "cve@mitre.org", url: "http://www.securityfocus.com/bid/33294", }, { source: "cve@mitre.org", url: "https://bugzilla.redhat.com/show_bug.cgi?id=477864", }, { source: "cve@mitre.org", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058", }, { source: "cve@mitre.org", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html", }, { source: "cve@mitre.org", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/33545", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/33294", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugzilla.redhat.com/show_bug.cgi?id=477864", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "CWE-264", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }