All the vulnerabilites related to nfs - nfs-utils
cve-2003-0252
Vulnerability from cvelistv5
Published
2003-07-15 04:00
Modified
2024-08-08 01:50
Severity ?
EPSS score ?
Summary
Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:50:46.930Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1001262",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT",
"x_transferred"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1"
},
{
"name": "RHSA-2003:206",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-206.html"
},
{
"name": "8179",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/8179"
},
{
"name": "20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=105839032403325\u0026w=2"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt"
},
{
"name": "TLSA-2003-44",
"tags": [
"vendor-advisory",
"x_refsource_TURBO",
"x_transferred"
],
"url": "http://www.turbolinux.com/security/TLSA-2003-44.txt"
},
{
"name": "RHSA-2003:207",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-207.html"
},
{
"name": "20030714 Linux nfs-utils xlog() off-by-one bug",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=105820223707191\u0026w=2"
},
{
"name": "1007187",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1007187"
},
{
"name": "20030714 Reality of the rpc.mountd bug",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html"
},
{
"name": "MDKSA-2003:076",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:076"
},
{
"name": "20030714 Linux nfs-utils xlog() off-by-one bug",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html"
},
{
"name": "20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=105830921519513\u0026w=2"
},
{
"name": "9259",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/9259"
},
{
"name": "nfs-utils-offbyone-bo(12600)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12600"
},
{
"name": "oval:org.mitre.oval:def:443",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443"
},
{
"name": "VU#258564",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/258564"
},
{
"name": "SuSE-SA:2003:031",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html"
},
{
"name": "DSA-349",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2003/dsa-349"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2003-07-14T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "1001262",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1"
},
{
"name": "RHSA-2003:206",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-206.html"
},
{
"name": "8179",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/8179"
},
{
"name": "20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=105839032403325\u0026w=2"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt"
},
{
"name": "TLSA-2003-44",
"tags": [
"vendor-advisory",
"x_refsource_TURBO"
],
"url": "http://www.turbolinux.com/security/TLSA-2003-44.txt"
},
{
"name": "RHSA-2003:207",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2003-207.html"
},
{
"name": "20030714 Linux nfs-utils xlog() off-by-one bug",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=105820223707191\u0026w=2"
},
{
"name": "1007187",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1007187"
},
{
"name": "20030714 Reality of the rpc.mountd bug",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html"
},
{
"name": "MDKSA-2003:076",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:076"
},
{
"name": "20030714 Linux nfs-utils xlog() off-by-one bug",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html"
},
{
"name": "20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=105830921519513\u0026w=2"
},
{
"name": "9259",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/9259"
},
{
"name": "nfs-utils-offbyone-bo(12600)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12600"
},
{
"name": "oval:org.mitre.oval:def:443",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443"
},
{
"name": "VU#258564",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/258564"
},
{
"name": "SuSE-SA:2003:031",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html"
},
{
"name": "DSA-349",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2003/dsa-349"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0252",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "1001262",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1"
},
{
"name": "RHSA-2003:206",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-206.html"
},
{
"name": "8179",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/8179"
},
{
"name": "20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=105839032403325\u0026w=2"
},
{
"name": "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt",
"refsource": "MISC",
"url": "http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt"
},
{
"name": "TLSA-2003-44",
"refsource": "TURBO",
"url": "http://www.turbolinux.com/security/TLSA-2003-44.txt"
},
{
"name": "RHSA-2003:207",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2003-207.html"
},
{
"name": "20030714 Linux nfs-utils xlog() off-by-one bug",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=105820223707191\u0026w=2"
},
{
"name": "1007187",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1007187"
},
{
"name": "20030714 Reality of the rpc.mountd bug",
"refsource": "VULNWATCH",
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html"
},
{
"name": "MDKSA-2003:076",
"refsource": "MANDRAKE",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2003:076"
},
{
"name": "20030714 Linux nfs-utils xlog() off-by-one bug",
"refsource": "VULNWATCH",
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html"
},
{
"name": "20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=105830921519513\u0026w=2"
},
{
"name": "9259",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/9259"
},
{
"name": "nfs-utils-offbyone-bo(12600)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/12600"
},
{
"name": "oval:org.mitre.oval:def:443",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443"
},
{
"name": "VU#258564",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/258564"
},
{
"name": "SuSE-SA:2003:031",
"refsource": "SUSE",
"url": "http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.html"
},
{
"name": "DSA-349",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-349"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2003-0252",
"datePublished": "2003-07-15T04:00:00",
"dateReserved": "2003-05-06T00:00:00",
"dateUpdated": "2024-08-08T01:50:46.930Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2004-0946
Vulnerability from cvelistv5
Published
2004-12-22 05:00
Modified
2024-08-08 00:31
Severity ?
EPSS score ?
Summary
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
References
| ▼ | URL | Tags |
|---|---|---|
| http://bugs.gentoo.org/show_bug.cgi?id=72113 | x_refsource_MISC | |
| http://www.redhat.com/support/errata/RHSA-2005-014.html | vendor-advisory, x_refsource_REDHAT | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18455 | vdb-entry, x_refsource_XF | |
| http://www.kb.cert.org/vuls/id/698302 | third-party-advisory, x_refsource_CERT-VN | |
| http://www.redhat.com/support/errata/RHSA-2004-583.html | vendor-advisory, x_refsource_REDHAT | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464 | vdb-entry, signature, x_refsource_OVAL | |
| http://www.securityfocus.com/archive/1/426072/30/6740/threaded | vendor-advisory, x_refsource_FEDORA | |
| http://secunia.com/advisories/13440/ | third-party-advisory, x_refsource_SECUNIA | |
| http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml | vendor-advisory, x_refsource_GENTOO | |
| http://www.mandriva.com/security/advisories?name=MDKSA-2005:005 | vendor-advisory, x_refsource_MANDRAKE | |
| http://www.securityfocus.com/bid/11911 | vdb-entry, x_refsource_BID |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T00:31:48.229Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=72113"
},
{
"name": "RHSA-2005:014",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"name": "nfsutils-getquotainfo-bo(18455)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455"
},
{
"name": "VU#698302",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/698302"
},
{
"name": "RHSA-2004:583",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"name": "oval:org.mitre.oval:def:10464",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464"
},
{
"name": "FLSA-2006:138098",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"name": "13440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/13440/"
},
{
"name": "GLSA-200412-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml"
},
{
"name": "MDKSA-2005:005",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005"
},
{
"name": "11911",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/11911"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-12-14T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://bugs.gentoo.org/show_bug.cgi?id=72113"
},
{
"name": "RHSA-2005:014",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"name": "nfsutils-getquotainfo-bo(18455)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455"
},
{
"name": "VU#698302",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/698302"
},
{
"name": "RHSA-2004:583",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"name": "oval:org.mitre.oval:def:10464",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464"
},
{
"name": "FLSA-2006:138098",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"name": "13440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/13440/"
},
{
"name": "GLSA-200412-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml"
},
{
"name": "MDKSA-2005:005",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005"
},
{
"name": "11911",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/11911"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0946",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://bugs.gentoo.org/show_bug.cgi?id=72113",
"refsource": "MISC",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=72113"
},
{
"name": "RHSA-2005:014",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"name": "nfsutils-getquotainfo-bo(18455)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455"
},
{
"name": "VU#698302",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/698302"
},
{
"name": "RHSA-2004:583",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"name": "oval:org.mitre.oval:def:10464",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464"
},
{
"name": "FLSA-2006:138098",
"refsource": "FEDORA",
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"name": "13440",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/13440/"
},
{
"name": "GLSA-200412-08",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml"
},
{
"name": "MDKSA-2005:005",
"refsource": "MANDRAKE",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005"
},
{
"name": "11911",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/11911"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-0946",
"datePublished": "2004-12-22T05:00:00",
"dateReserved": "2004-10-12T00:00:00",
"dateUpdated": "2024-08-08T00:31:48.229Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2008-4552
Vulnerability from cvelistv5
Published
2008-10-14 19:00
Modified
2024-08-07 10:17
Severity ?
EPSS score ?
Summary
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T10:17:09.906Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "32481",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/32481"
},
{
"name": "32346",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/32346"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0307"
},
{
"name": "oval:org.mitre.oval:def:8325",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325"
},
{
"name": "38794",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/38794"
},
{
"name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
},
{
"name": "nfsutils-hostctl-security-bypass(45895)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895"
},
{
"name": "RHSA-2009:1321",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1321.html"
},
{
"name": "[oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/2"
},
{
"name": "33006",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33006"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=458676"
},
{
"name": "36538",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/36538"
},
{
"name": "[oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/5"
},
{
"name": "MDVSA-2009:060",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060"
},
{
"name": "oval:org.mitre.oval:def:11544",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544"
},
{
"name": "20081030 rPSA-2008-0307-1 nfs-client nfs-server nfs-utils",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/497935/100/0/threaded"
},
{
"name": "USN-687-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-687-1"
},
{
"name": "38833",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/38833"
},
{
"name": "31823",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/31823"
},
{
"name": "ADV-2010-0528",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2010/0528"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-10-13T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "32481",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/32481"
},
{
"name": "32346",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/32346"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0307"
},
{
"name": "oval:org.mitre.oval:def:8325",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325"
},
{
"name": "38794",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/38794"
},
{
"name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
},
{
"name": "nfsutils-hostctl-security-bypass(45895)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895"
},
{
"name": "RHSA-2009:1321",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2009-1321.html"
},
{
"name": "[oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/2"
},
{
"name": "33006",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33006"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=458676"
},
{
"name": "36538",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/36538"
},
{
"name": "[oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/5"
},
{
"name": "MDVSA-2009:060",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060"
},
{
"name": "oval:org.mitre.oval:def:11544",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544"
},
{
"name": "20081030 rPSA-2008-0307-1 nfs-client nfs-server nfs-utils",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/497935/100/0/threaded"
},
{
"name": "USN-687-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-687-1"
},
{
"name": "38833",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/38833"
},
{
"name": "31823",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/31823"
},
{
"name": "ADV-2010-0528",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2010/0528"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2008-4552",
"datePublished": "2008-10-14T19:00:00",
"dateReserved": "2008-10-14T00:00:00",
"dateUpdated": "2024-08-07T10:17:09.906Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2009-0180
Vulnerability from cvelistv5
Published
2009-01-20 16:00
Modified
2024-08-07 04:24
Severity ?
EPSS score ?
Summary
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.
References
| ▼ | URL | Tags |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=477864 | x_refsource_CONFIRM | |
| http://www.securityfocus.com/bid/33294 | vdb-entry, x_refsource_BID | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/48058 | vdb-entry, x_refsource_XF | |
| https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html | vendor-advisory, x_refsource_FEDORA | |
| https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html | vendor-advisory, x_refsource_FEDORA | |
| http://secunia.com/advisories/33545 | third-party-advisory, x_refsource_SECUNIA |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:24:18.164Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=477864"
},
{
"name": "33294",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/33294"
},
{
"name": "nfsutils-tcpwrapper-security-bypass(48058)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058"
},
{
"name": "FEDORA-2009-0297",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html"
},
{
"name": "FEDORA-2009-0266",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html"
},
{
"name": "33545",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33545"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-01-14T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-07T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=477864"
},
{
"name": "33294",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/33294"
},
{
"name": "nfsutils-tcpwrapper-security-bypass(48058)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058"
},
{
"name": "FEDORA-2009-0297",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html"
},
{
"name": "FEDORA-2009-0266",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html"
},
{
"name": "33545",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33545"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-0180",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=477864",
"refsource": "CONFIRM",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=477864"
},
{
"name": "33294",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/33294"
},
{
"name": "nfsutils-tcpwrapper-security-bypass(48058)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058"
},
{
"name": "FEDORA-2009-0297",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html"
},
{
"name": "FEDORA-2009-0266",
"refsource": "FEDORA",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html"
},
{
"name": "33545",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33545"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-0180",
"datePublished": "2009-01-20T16:00:00",
"dateReserved": "2009-01-20T00:00:00",
"dateUpdated": "2024-08-07T04:24:18.164Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2004-1014
Vulnerability from cvelistv5
Published
2004-12-08 05:00
Modified
2024-08-08 00:38
Severity ?
EPSS score ?
Summary
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.debian.org/security/2004/dsa-606 | vendor-advisory, x_refsource_DEBIAN | |
| http://www.redhat.com/support/errata/RHSA-2005-014.html | vendor-advisory, x_refsource_REDHAT | |
| http://www.redhat.com/support/errata/RHSA-2004-583.html | vendor-advisory, x_refsource_REDHAT | |
| http://www.securityfocus.com/bid/11785 | vdb-entry, x_refsource_BID | |
| http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup | x_refsource_CONFIRM | |
| http://www.securityfocus.com/archive/1/426072/30/6740/threaded | vendor-advisory, x_refsource_FEDORA | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899 | vdb-entry, signature, x_refsource_OVAL | |
| https://www.ubuntu.com/usn/usn-36-1/ | vendor-advisory, x_refsource_UBUNTU | |
| http://www.trustix.org/errata/2004/0065/ | vendor-advisory, x_refsource_TRUSTIX | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18332 | vdb-entry, x_refsource_XF |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T00:38:59.824Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "DSA-606",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2004/dsa-606"
},
{
"name": "RHSA-2005:014",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"name": "RHSA-2004:583",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"name": "11785",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/11785"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258\u0026view=markup"
},
{
"name": "FLSA-2006:138098",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"name": "oval:org.mitre.oval:def:10899",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899"
},
{
"name": "USN-36-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://www.ubuntu.com/usn/usn-36-1/"
},
{
"name": "2004-0065",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX",
"x_transferred"
],
"url": "http://www.trustix.org/errata/2004/0065/"
},
{
"name": "nfs-utils-statd-dos(18332)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-12-01T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "DSA-606",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2004/dsa-606"
},
{
"name": "RHSA-2005:014",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"name": "RHSA-2004:583",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"name": "11785",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/11785"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258\u0026view=markup"
},
{
"name": "FLSA-2006:138098",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"name": "oval:org.mitre.oval:def:10899",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899"
},
{
"name": "USN-36-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://www.ubuntu.com/usn/usn-36-1/"
},
{
"name": "2004-0065",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX"
],
"url": "http://www.trustix.org/errata/2004/0065/"
},
{
"name": "nfs-utils-statd-dos(18332)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-1014",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "DSA-606",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2004/dsa-606"
},
{
"name": "RHSA-2005:014",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"name": "RHSA-2004:583",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"name": "11785",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/11785"
},
{
"name": "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258\u0026view=markup",
"refsource": "CONFIRM",
"url": "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258\u0026view=markup"
},
{
"name": "FLSA-2006:138098",
"refsource": "FEDORA",
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"name": "oval:org.mitre.oval:def:10899",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899"
},
{
"name": "USN-36-1",
"refsource": "UBUNTU",
"url": "https://www.ubuntu.com/usn/usn-36-1/"
},
{
"name": "2004-0065",
"refsource": "TRUSTIX",
"url": "http://www.trustix.org/errata/2004/0065/"
},
{
"name": "nfs-utils-statd-dos(18332)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-1014",
"datePublished": "2004-12-08T05:00:00",
"dateReserved": "2004-11-04T00:00:00",
"dateUpdated": "2024-08-08T00:38:59.824Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2004-0154
Vulnerability from cvelistv5
Published
2004-05-12 04:00
Modified
2024-08-08 00:10
Severity ?
EPSS score ?
Summary
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt | vendor-advisory, x_refsource_TRUSTIX | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673 | vdb-entry, signature, x_refsource_OVAL | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861 | vdb-entry, signature, x_refsource_OVAL | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15418 | vdb-entry, x_refsource_XF | |
| http://www.securityfocus.com/bid/9813 | vdb-entry, x_refsource_BID | |
| http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535 | x_refsource_MISC | |
| http://www.redhat.com/support/errata/RHSA-2004-072.html | vendor-advisory, x_refsource_REDHAT |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T00:10:02.499Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2004-0009",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX",
"x_transferred"
],
"url": "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt"
},
{
"name": "oval:org.mitre.oval:def:9673",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673"
},
{
"name": "oval:org.mitre.oval:def:861",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861"
},
{
"name": "nfs-utils-dns-dos(15418)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418"
},
{
"name": "9813",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9813"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535"
},
{
"name": "RHSA-2004:072",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-072.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-03-05T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "2004-0009",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX"
],
"url": "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt"
},
{
"name": "oval:org.mitre.oval:def:9673",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673"
},
{
"name": "oval:org.mitre.oval:def:861",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861"
},
{
"name": "nfs-utils-dns-dos(15418)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418"
},
{
"name": "9813",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9813"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535"
},
{
"name": "RHSA-2004:072",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-072.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0154",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "2004-0009",
"refsource": "TRUSTIX",
"url": "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt"
},
{
"name": "oval:org.mitre.oval:def:9673",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673"
},
{
"name": "oval:org.mitre.oval:def:861",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861"
},
{
"name": "nfs-utils-dns-dos(15418)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418"
},
{
"name": "9813",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9813"
},
{
"name": "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535",
"refsource": "MISC",
"url": "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535"
},
{
"name": "RHSA-2004:072",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2004-072.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-0154",
"datePublished": "2004-05-12T04:00:00",
"dateReserved": "2004-02-13T00:00:00",
"dateUpdated": "2024-08-08T00:10:02.499Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Vulnerability from fkie_nvd
Published
2005-01-10 05:00
Modified
2024-11-20 23:49
Severity ?
Summary
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nfs | nfs-utils | 1.0 | |
| nfs | nfs-utils | 1.0.1 | |
| nfs | nfs-utils | 1.0.2 | |
| nfs | nfs-utils | 1.0.3 | |
| nfs | nfs-utils | 1.0.4 | |
| nfs | nfs-utils | 1.0.6 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux_desktop | 3.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "813B76CA-5083-4697-A484-435113B7FF88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0964EDA2-D86C-4189-9B03-61A292601649",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F83865C7-D7A1-4357-8C15-9865BDECD98C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2EFD8CFB-A24A-49F0-856C-4B985E203C9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D4645DF7-A5C2-4E8D-A07F-22F77670D68F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A8616115-30AC-4160-B196-D417AF32C7C7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
"matchCriteriaId": "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
"matchCriteriaId": "EC79FF22-2664-4C40-B0B3-6D23B5F45162",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
"matchCriteriaId": "0EFE2E73-9536-41A9-B83B-0A06B54857F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request."
},
{
"lang": "es",
"value": "rquotad en nfs-utils (rquota_server.c) anteriores a 1.0.6-r6 en arquitecturas de 64 bits no realiza una conversi\u00f3n de enteros adecuadamente, lo que conduce a un desbordamiento de b\u00fafer basado en la pila y permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante una petici\u00f3n NFS artesanal."
}
],
"id": "CVE-2004-0946",
"lastModified": "2024-11-20T23:49:44.987",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2005-01-10T05:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=72113"
},
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/13440/"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/698302"
},
{
"source": "cve@mitre.org",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.securityfocus.com/bid/11911"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455"
},
{
"source": "cve@mitre.org",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://bugs.gentoo.org/show_bug.cgi?id=72113"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/13440/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/698302"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:005"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.securityfocus.com/bid/11911"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18455"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10464"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2008-10-14 20:00
Modified
2024-11-21 00:51
Severity ?
Summary
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nfs | nfs-utils | * | |
| nfs | nfs-utils | 0.2 | |
| nfs | nfs-utils | 0.2.1 | |
| nfs | nfs-utils | 0.3.1 | |
| nfs | nfs-utils | 0.3.3 | |
| nfs | nfs-utils | 1.0 | |
| nfs | nfs-utils | 1.0.1 | |
| nfs | nfs-utils | 1.0.2 | |
| nfs | nfs-utils | 1.0.3 | |
| nfs | nfs-utils | 1.0.4 | |
| nfs | nfs-utils | 1.0.6 | |
| nfs | nfs-utils | 1.0.7 | |
| nfs | nfs-utils | 1.0.7 | |
| nfs | nfs-utils | 1.0.7 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.8 | |
| nfs | nfs-utils | 1.0.9 | |
| nfs | nfs-utils | 1.0.10 | |
| nfs | nfs-utils | 1.0.11 | |
| nfs | nfs-utils | 1.0.12 | |
| nfs | nfs-utils | 1.1.0 | |
| nfs | nfs-utils | 1.1.0 | |
| nfs | nfs-utils | 1.1.1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*",
"matchCriteriaId": "45AEA724-343E-4806-ACCE-2AA5F8F8BAAA",
"versionEndIncluding": "1.1.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "474B82D5-5D48-41ED-B2C1-68907A27491F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "813B76CA-5083-4697-A484-435113B7FF88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0964EDA2-D86C-4189-9B03-61A292601649",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F83865C7-D7A1-4357-8C15-9865BDECD98C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2EFD8CFB-A24A-49F0-856C-4B985E203C9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D4645DF7-A5C2-4E8D-A07F-22F77670D68F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A8616115-30AC-4160-B196-D417AF32C7C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "1234E468-8DC6-4474-8B3D-DB550AA801B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*",
"matchCriteriaId": "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*",
"matchCriteriaId": "63515439-6FCC-43D7-B8DD-D14DD4D7878E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "38E96A1E-5A28-4177-A26F-F19573A17775",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*",
"matchCriteriaId": "8A54F7D1-A1CD-4804-B962-BC536602F6B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*",
"matchCriteriaId": "2D1E56AB-B263-42AF-9034-D20AD604E50D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*",
"matchCriteriaId": "0D76C312-3E5D-4176-8691-DD8C21C6A5E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*",
"matchCriteriaId": "D39D0EDE-8D14-42F7-BAEF-A64D559DE495",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "9BDF2DB8-0570-43C1-9206-14CDD027EBFD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*",
"matchCriteriaId": "D18EC9F4-50E7-4974-906E-09533BC7722C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*",
"matchCriteriaId": "8A54C8D7-D142-4DB5-8453-57E8612BFFC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A4CED17F-B9CE-46D2-8F00-8419451E51FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*",
"matchCriteriaId": "D0571302-7EC5-41D3-BBAE-821657A56BED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions."
},
{
"lang": "es",
"value": "La funci\u00f3n good_client en nfs-utils versi\u00f3n 1.0.9, y posiblemente otras versiones anteriores a 1.1.3, invoca la funci\u00f3n hosts_ctl con el orden incorrecto de argumentos, lo que causa que la TCP Wrappers ignore los netgroups y permita a los atacantes remotos omitir las restricciones de acceso previstas."
}
],
"id": "CVE-2008-4552",
"lastModified": "2024-11-21T00:51:57.493",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2008-10-14T20:00:01.667",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/32346"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/32481"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/33006"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/36538"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/38794"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/38833"
},
{
"source": "secalert@redhat.com",
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0307"
},
{
"source": "secalert@redhat.com",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/2"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/5"
},
{
"source": "secalert@redhat.com",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1321.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/archive/1/497935/100/0/threaded"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://www.securityfocus.com/bid/31823"
},
{
"source": "secalert@redhat.com",
"url": "http://www.ubuntu.com/usn/USN-687-1"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/0528"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=458676"
},
{
"source": "secalert@redhat.com",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895"
},
{
"source": "secalert@redhat.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544"
},
{
"source": "secalert@redhat.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/32346"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/32481"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/33006"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/36538"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/38794"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/38833"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0307"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:060"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/07/19/5"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2009-1321.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/497935/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.securityfocus.com/bid/31823"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ubuntu.com/usn/USN-687-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.vupen.com/english/advisories/2010/0528"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=458676"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45895"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vendorComments": [
{
"comment": "This issue affected Red Hat Enterprise Linux 5 and was addressed by\nhttps://rhn.redhat.com/errata/RHSA-2009-1321.html\n",
"lastModified": "2009-09-02T00:00:00",
"organization": "Red Hat"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2004-06-14 04:00
Modified
2024-11-20 23:47
Severity ?
Summary
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "813B76CA-5083-4697-A484-435113B7FF88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0964EDA2-D86C-4189-9B03-61A292601649",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2EFD8CFB-A24A-49F0-856C-4B985E203C9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D4645DF7-A5C2-4E8D-A07F-22F77670D68F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A8616115-30AC-4160-B196-D417AF32C7C7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name."
},
{
"lang": "es",
"value": "rpc.mountd en nfs-utils posteriores a 1.0.3 y anteriores a 1.0.6 permite a atacantes causar una denegaci\u00f3n de servicio (ca\u00edda) mediante el montaje de un directorio de un cliente cuya consulta DNS inversa es distinta de la consulta directa."
}
],
"id": "CVE-2004-0154",
"lastModified": "2024-11-20T23:47:52.877",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2004-06-14T04:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-072.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.securityfocus.com/bid/9813"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418"
},
{
"source": "cve@mitre.org",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861"
},
{
"source": "cve@mitre.org",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-072.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.securityfocus.com/bid/9813"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15418"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2005-01-10 05:00
Modified
2024-11-20 23:49
Severity ?
Summary
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| nfs | nfs-utils | 1.0.6 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| debian | debian_linux | 3.0 | |
| mandrakesoft | mandrake_linux | 9.2 | |
| mandrakesoft | mandrake_linux | 9.2 | |
| mandrakesoft | mandrake_linux | 10.0 | |
| mandrakesoft | mandrake_linux | 10.0 | |
| mandrakesoft | mandrake_linux | 10.1 | |
| mandrakesoft | mandrake_linux | 10.1 | |
| mandrakesoft | mandrake_linux_corporate_server | 2.1 | |
| mandrakesoft | mandrake_linux_corporate_server | 2.1 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux | 3.0 | |
| redhat | enterprise_linux_desktop | 3.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A8616115-30AC-4160-B196-D417AF32C7C7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2CAE037F-111C-4A76-8FFE-716B74D65EF3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
"matchCriteriaId": "A6B060E4-B5A6-4469-828E-211C52542547",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
"matchCriteriaId": "974C3541-990C-4CD4-A05A-38FA74A84632",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
"matchCriteriaId": "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
"matchCriteriaId": "58792F77-B06F-4780-BA25-FE1EE6C3FDD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
"matchCriteriaId": "C9419322-572F-4BB6-8416-C5E96541CF33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
"matchCriteriaId": "BFC50555-C084-46A3-9C9F-949C5E3BB448",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
"matchCriteriaId": "9C25D6E1-D283-4CEA-B47B-60C47A5C0797",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
"matchCriteriaId": "AD18A446-C634-417E-86AC-B19B6DDDC856",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
"matchCriteriaId": "E4BB852E-61B2-4842-989F-C6C0C901A8D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
"matchCriteriaId": "24DD9D59-E2A2-4116-A887-39E8CC2004FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
"matchCriteriaId": "F28D7457-607E-4E0C-909A-413F91CFCD82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4177C378-7729-46AB-B49B-C6DAED3200E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*",
"matchCriteriaId": "2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
"matchCriteriaId": "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3528DABD-B821-4D23-AE12-614A9CA92C46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
"matchCriteriaId": "9E661D58-18DF-4CCF-9892-F873618F4535",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E0F0D201-B1DC-4024-AF77-A284673618F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
"matchCriteriaId": "052E3862-BFB7-42E7-889D-8590AFA8EF37",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*",
"matchCriteriaId": "78B46FFA-5B09-473E-AD33-3DB18BD0DAFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*",
"matchCriteriaId": "EC79FF22-2664-4C40-B0B3-6D23B5F45162",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*",
"matchCriteriaId": "0EFE2E73-9536-41A9-B83B-0A06B54857F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated."
},
{
"lang": "es",
"value": "statd en nfs-utils 1.257 y anteriores hace caso a la se\u00f1al SIGPIPE, lo que permite a atacanes remotos causar una denegaci\u00f3n de servicio (ca\u00edda de proceso de servidor) mediante una conexi\u00f3n TCP que es terminada prematuramente."
}
],
"id": "CVE-2004-1014",
"lastModified": "2024-11-20T23:49:54.483",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2005-01-10T05:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"url": "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258\u0026view=markup"
},
{
"source": "cve@mitre.org",
"url": "http://www.debian.org/security/2004/dsa-606"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.securityfocus.com/bid/11785"
},
{
"source": "cve@mitre.org",
"url": "http://www.trustix.org/errata/2004/0065/"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332"
},
{
"source": "cve@mitre.org",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899"
},
{
"source": "cve@mitre.org",
"url": "https://www.ubuntu.com/usn/usn-36-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258\u0026view=markup"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2004/dsa-606"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2004-583.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2005-014.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/426072/30/6740/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.securityfocus.com/bid/11785"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.trustix.org/errata/2004/0065/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18332"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.ubuntu.com/usn/usn-36-1/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2009-01-20 16:30
Modified
2024-11-21 00:59
Severity ?
Summary
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*",
"matchCriteriaId": "45AEA724-343E-4806-ACCE-2AA5F8F8BAAA",
"versionEndIncluding": "1.1.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "474B82D5-5D48-41ED-B2C1-68907A27491F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "813B76CA-5083-4697-A484-435113B7FF88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0964EDA2-D86C-4189-9B03-61A292601649",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F83865C7-D7A1-4357-8C15-9865BDECD98C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2EFD8CFB-A24A-49F0-856C-4B985E203C9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D4645DF7-A5C2-4E8D-A07F-22F77670D68F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A8616115-30AC-4160-B196-D417AF32C7C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "1234E468-8DC6-4474-8B3D-DB550AA801B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*",
"matchCriteriaId": "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*",
"matchCriteriaId": "63515439-6FCC-43D7-B8DD-D14DD4D7878E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "38E96A1E-5A28-4177-A26F-F19573A17775",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*",
"matchCriteriaId": "8A54F7D1-A1CD-4804-B962-BC536602F6B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*",
"matchCriteriaId": "2D1E56AB-B263-42AF-9034-D20AD604E50D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*",
"matchCriteriaId": "0D76C312-3E5D-4176-8691-DD8C21C6A5E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*",
"matchCriteriaId": "D39D0EDE-8D14-42F7-BAEF-A64D559DE495",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "9BDF2DB8-0570-43C1-9206-14CDD027EBFD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*",
"matchCriteriaId": "D18EC9F4-50E7-4974-906E-09533BC7722C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*",
"matchCriteriaId": "8A54C8D7-D142-4DB5-8453-57E8612BFFC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A4CED17F-B9CE-46D2-8F00-8419451E51FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*",
"matchCriteriaId": "D0571302-7EC5-41D3-BBAE-821657A56BED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:fedora:9:*:*:*:*:*:*:*",
"matchCriteriaId": "D32A30CD-EA21-4AA6-868F-3448AA50B70D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6D7165E8-FC10-4A4F-9B58-49CA830D2DA8",
"versionEndIncluding": "1.1.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "025FEFFD-12DD-4D29-A0FA-93DF96AFCFF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "474B82D5-5D48-41ED-B2C1-68907A27491F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "69A6C9CB-446C-4ACF-B2CA-41A1BD5F229A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3E68D7A7-DCEA-417D-AA56-D7B2EB410CDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "813B76CA-5083-4697-A484-435113B7FF88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0964EDA2-D86C-4189-9B03-61A292601649",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F83865C7-D7A1-4357-8C15-9865BDECD98C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "2EFD8CFB-A24A-49F0-856C-4B985E203C9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D4645DF7-A5C2-4E8D-A07F-22F77670D68F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "A8616115-30AC-4160-B196-D417AF32C7C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:*",
"matchCriteriaId": "1234E468-8DC6-4474-8B3D-DB550AA801B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:*",
"matchCriteriaId": "58FA0EE6-7DBD-4105-B70A-1E04E0CC4FEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:*",
"matchCriteriaId": "63515439-6FCC-43D7-B8DD-D14DD4D7878E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:*",
"matchCriteriaId": "38E96A1E-5A28-4177-A26F-F19573A17775",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:*",
"matchCriteriaId": "8A54F7D1-A1CD-4804-B962-BC536602F6B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:*",
"matchCriteriaId": "2D1E56AB-B263-42AF-9034-D20AD604E50D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:*",
"matchCriteriaId": "0D76C312-3E5D-4176-8691-DD8C21C6A5E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:*",
"matchCriteriaId": "D39D0EDE-8D14-42F7-BAEF-A64D559DE495",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "9BDF2DB8-0570-43C1-9206-14CDD027EBFD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:*",
"matchCriteriaId": "D18EC9F4-50E7-4974-906E-09533BC7722C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "3A4A1D1B-639F-467E-BE62-1BDDDCC9671A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:*",
"matchCriteriaId": "8A54C8D7-D142-4DB5-8453-57E8612BFFC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A4CED17F-B9CE-46D2-8F00-8419451E51FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:*",
"matchCriteriaId": "D0571302-7EC5-41D3-BBAE-821657A56BED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2E6F15C5-4D7E-499C-84F3-777F8C4C0B49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F202B0A0-9EDE-4311-88E5-DC4411034457",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:nfs:nfs-utils:1.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3F632663-FAAF-4780-9225-DEF175B803FB",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:fedora:10:*:*:*:*:*:*:*",
"matchCriteriaId": "BA70E035-8475-4046-ABD7-5AE59F874EBA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376."
},
{
"lang": "es",
"value": "Algunos Fedora crean secuencias de comando para nfs-utils anteriores a v1.1.2-9.fc9 en Fedora 9, y anteriores a v1.1.4-6.fc10 en Fedora 10, no da soporte a TCP Wrapper, lo que podr\u00eda permitir a atacantes remotos evitar \r\nlas restricciones de acceso previstas, posiblemente est\u00e9 relacionado con el caso CVE-2008-1376."
}
],
"id": "CVE-2009-0180",
"lastModified": "2024-11-21T00:59:17.700",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2009-01-20T16:30:00.467",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/33545"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/33294"
},
{
"source": "cve@mitre.org",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=477864"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058"
},
{
"source": "cve@mitre.org",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html"
},
{
"source": "cve@mitre.org",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/33545"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/33294"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=477864"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48058"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}