CVE-2012-3417

Published: Aug 13, 2012Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Exploitability: 4.9 / Impact: 4.9

Source: NVD

Description

The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny.

Affected (25)

Products: Jan Kara: Linux Diskquota

Jan Kara

1 product

Linux Diskquota

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Jan Kara Linux Diskquota	version ≤ 3.16
Jan Kara Linux Diskquota	Version 2.0
Jan Kara Linux Diskquota	Version 3.01
Jan Kara Linux Diskquota	Version 3.01 pre2
Jan Kara Linux Diskquota	Version 3.01 pre3
Jan Kara Linux Diskquota	Version 3.01 pre4
Jan Kara Linux Diskquota	Version 3.01 pre5
Jan Kara Linux Diskquota	Version 3.01 pre6
Jan Kara Linux Diskquota	Version 3.01 pre7
Jan Kara Linux Diskquota	Version 3.01 pre8
Jan Kara Linux Diskquota	Version 3.01 pre9
Jan Kara Linux Diskquota	Version 3.02
Jan Kara Linux Diskquota	Version 3.03
Jan Kara Linux Diskquota	Version 3.04
Jan Kara Linux Diskquota	Version 3.05
Jan Kara Linux Diskquota	Version 3.06
Jan Kara Linux Diskquota	Version 3.07
Jan Kara Linux Diskquota	Version 3.08
Jan Kara Linux Diskquota	Version 3.09
Jan Kara Linux Diskquota	Version 3.10
Jan Kara Linux Diskquota	Version 3.11
Jan Kara Linux Diskquota	Version 3.12
Jan Kara Linux Diskquota	Version 3.13
Jan Kara Linux Diskquota	Version 3.14
Jan Kara Linux Diskquota	Version 3.15