CVE-2008-4552
Summary
| CVE | CVE-2008-4552 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2008-10-14 20:00:00 UTC |
|---|
| Updated | 2018-10-11 20:52:00 UTC |
|---|
| Description | The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| VMware ESX Server 4 update for newt, nfs-utils, and glib2 - Advisories - Community |
SECUNIA |
secunia.com |
Vendor Advisory |
| IBM X-Force Exchange |
XF |
exchange.xforce.ibmcloud.com |
|
| wiki.rpath.com/Advisories:rPSA-2008-0307 |
CONFIRM |
wiki.rpath.com |
|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH |
VUPEN |
www.vupen.com |
Vendor Advisory |
| Bug 458676 – CVE-2008-4552 nfs-utils: incorrect use of tcp_wrappers, causing hostname-based rules to be ignored |
CONFIRM |
bugzilla.redhat.com |
|
| 'nfs-utils' Package 'hosts_ctl()' Security Bypass Vulnerability |
BID |
www.securityfocus.com |
Patch |
| Repository / Oval Repository |
OVAL |
oval.cisecurity.org |
|
| SecurityFocus |
BUGTRAQ |
www.securityfocus.com |
|
| oss-security - Re: CVE Request: quota: incorrect use of tcp_wrappers |
MLIST |
www.openwall.com |
|
| nfs-utils TCP Wrappers NFS Netgroups Security Bypass - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
Vendor Advisory |
| rPath update for nfs-utils and nfs-client - Secunia.com |
SECUNIA |
secunia.com |
Vendor Advisory |
| Support / Security / Advisories / / MDVSA-2009:060 | Mandriva |
MANDRIVA |
www.mandriva.com |
|
| oss-security - CVE Request: quota: incorrect use of tcp_wrappers |
MLIST |
www.openwall.com |
|
| Support |
REDHAT |
www.redhat.com |
|
| VMware vMA Update for Multiple Packages - Advisories - Community |
SECUNIA |
secunia.com |
Vendor Advisory |
| Repository / Oval Repository |
OVAL |
oval.cisecurity.org |
|
| Red Hat update for nfs-utils - Secunia.com |
SECUNIA |
secunia.com |
|
| Ubuntu update for nfs-utils - Secunia Advisories - Vulnerability Intelligence - Secunia.com |
SECUNIA |
secunia.com |
Vendor Advisory |
| [Security-announce] VMSA-2010-0004 ESX Service Console and vMA third party updates |
MLIST |
lists.vmware.com |
|
| USN-687-1: nfs-utils vulnerability | Ubuntu |
UBUNTU |
www.ubuntu.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|
| Red Hat | 2009-09-02 | Joshua Bressers | This issue affected Red Hat Enterprise Linux 5 and was addressed by https://rhn.redhat.com/errata/RHSA-2009-1321.html |
There are currently no legacy QID mappings associated with this CVE.
