CVE-2008-4552

Published: Oct 14, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.

Affected (26)

Products: Nfs: Nfs Utils

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Nfs Nfs Utils	version ≤ 1.1.2
Nfs Nfs Utils	Version 0.2.1
Nfs Nfs Utils	Version 0.2
Nfs Nfs Utils	Version 0.3.1
Nfs Nfs Utils	Version 0.3.3
Nfs Nfs Utils	Version 1.0.10
Nfs Nfs Utils	Version 1.0.11
Nfs Nfs Utils	Version 1.0.12
Nfs Nfs Utils	Version 1.0.1
Nfs Nfs Utils	Version 1.0.2
Nfs Nfs Utils	Version 1.0.3
Nfs Nfs Utils	Version 1.0.4
Nfs Nfs Utils	Version 1.0.6
Nfs Nfs Utils	Version 1.0.7
Nfs Nfs Utils	Version 1.0.7 pre-1
Nfs Nfs Utils	Version 1.0.7 pre-2
Nfs Nfs Utils	Version 1.0.8
Nfs Nfs Utils	Version 1.0.8 rc-1
Nfs Nfs Utils	Version 1.0.8 rc-2
Nfs Nfs Utils	Version 1.0.8 rc-3
Nfs Nfs Utils	Version 1.0.8 rc-4
Nfs Nfs Utils	Version 1.0.9
Nfs Nfs Utils	Version 1.0
Nfs Nfs Utils	Version 1.1.0
Nfs Nfs Utils	Version 1.1.0 rc-1
Nfs Nfs Utils	Version 1.1.1

Related CWEs

References (40)

http://lists.vmware.com/pipermail/security-announce/2010/000082.html

Source: secalert@redhat.com

http://secunia.com/advisories/32346

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32481

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33006

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36538

Source: secalert@redhat.com

http://secunia.com/advisories/38794

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38833

Source: secalert@redhat.com

Vendor Advisory

http://wiki.rpath.com/Advisories:rPSA-2008-0307

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:060

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/07/19/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/07/19/5

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-1321.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/497935/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/31823

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/USN-687-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0528

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=458676

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/45895

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325

Source: secalert@redhat.com

http://lists.vmware.com/pipermail/security-announce/2010/000082.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32346

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32481

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/33006

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/36538

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38794

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38833

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://wiki.rpath.com/Advisories:rPSA-2008-0307

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:060

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/07/19/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/07/19/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-1321.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/497935/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31823

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ubuntu.com/usn/USN-687-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0528

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=458676

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/45895

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.