Red Hat redhat-config-nfs Exported Shares Configuration Vulnerability

Bugtraq ID:	11240
Class:	Configuration Error
CVE:	CVE-2004-0750
Remote:	Yes
Local:	No
Published:	Sep 23 2004 12:00AM
Updated:	May 08 2006 11:44PM
Credit:	John Buswell is credited with the discovery of this issue.
Vulnerable:	Redhat Linux 9.0 i386 Redhat Fedora Core2 Redhat Fedora Core1 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux AS 3 Redhat Desktop 3.0
Not Vulnerable:

Red Hat redhat-config-nfs Exported Shares Configuration Vulnerability

Red Hat redhat-config-nfs is affected by a vulnerability when exporting share configurations. The application fails to apply proper settings to the affected network file system (NFS) shares.

This issue would cause some NFS option, such as 'all_squash', to fail to be applied, potentially giving administrators a false sense of security.

Red Hat redhat-config-nfs Exported Shares Configuration Vulnerability

No exploit is required to leverage this issue.

Red Hat redhat-config-nfs Exported Shares Configuration Vulnerability

Solution:

Please see the referenced advisories for additional information.


Redhat Fedora Core2

• Fedora Legacy system-config-nfs-1.2.3-5.legacy.noarch.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/2/updates/i386/system-config-n fs-1.2.3-5.legacy.noarch.rpm

Redhat Linux 9.0 i386

• Fedora Legacy redhat-config-nfs-1.0.13-6.legacy.noarch.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/redhat-config-n fs-1.0.13-6.legacy.noarch.rpm

Red Hat redhat-config-nfs Exported Shares Configuration Vulnerability

References: