Red Hat Security Advisory

RHSA-2013:0120

quota security and bug fix update

Released 2013-01-08 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) quota-1:3.13-8.el5, quota-1:3.13-8.el5.i386, quota-1:3.13-8.el5.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) quota-1:3.13-8.el5, quota-1:3.13-8.el5.i386

Fixes 1 record

TI-2012-02946 CVE-2012-3417 · GHSA-4p8f-j9gj-x3p7

The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before…

LOW 25

The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers r…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03147 Published 2012-08-13 Partial fix CWE-264