CVE-2011-2500

Published: Feb 15, 2014Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.

Affected (4)

Products: Linux Nfs: Nfs Utils

Linux Nfs

1 product

Nfs Utils

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Nfs Nfs Utils	Up to 1.2.3
Linux Nfs Nfs Utils	Version 1.2.0
Linux Nfs Nfs Utils	Version 1.2.1
Linux Nfs Nfs Utils	Version 1.2.2

Related CWEs

CWE-264

References (10)

http://marc.info/?l=linux-nfs&m=130875695821953&w=2

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1534.html

Source: secalert@redhat.com

http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/

Source: secalert@redhat.com

http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=716949

Source: secalert@redhat.com

http://marc.info/?l=linux-nfs&m=130875695821953&w=2