Red Hat Security AdvisoryRHSA-2011:1534
nfs-utils security, bug fix, and enhancement update
Released 2011-12-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) nfs-utils-1:1.2.3-15.el6
- Red Hat Enterprise Linux HPC Node (v. 6) nfs-utils-1:1.2.3-15.el6
- Red Hat Enterprise Linux Server (v. 6) nfs-utils-1:1.2.3-15.el6
- Red Hat Enterprise Linux Workstation (v. 6) nfs-utils-1:1.2.3-15.el6
Fixes 2 records
Priority LOW 38
The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing cra…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02565 · Published 2014-02-15 · Fixed CWE-264
Priority LOW 16
The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows…
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00348 · Published 2014-02-26 · Fixed CWE-20
