Read the docs
TI-2008-01325 Aliases CVE-2008-1376GHSA-mpmc-v776-vcmf

A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise…

Priority LOW 38CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.

Why it matters now

EPSS 0.02647 85th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*5.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*5.0Running onRed Hat
cpe:2.3:a:redhat:nfs_utils:1.0.9:35z.el5_2:*:*:*:*:*:*1.0.9 35z.el5_2VulnerableRed Hat
  • cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:* Versions 5.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:* Versions 5.0 Running on ·Red Hat
  • cpe:2.3:a:redhat:nfs_utils:1.0.9:35z.el5_2:*:*:*:*:*:* Versions 1.0.9 35z.el5_2 Vulnerable ·Red Hat

Remediation

Red Hat 2 advisories

  • RHSA-2009:0955 Released 2009-05-18 · Red Hat rating Moderate
    nfs-utils security and bug fix update
    • Red Hat Enterprise Linux AS version 4 nfs-utils-1.0.6-93.EL4, nfs-utils-1.0.6-93.EL4.i386, nfs-utils-1.0.6-93.EL4.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 nfs-utils-1.0.6-93.EL4, nfs-utils-1.0.6-93.EL4.i386
    • Red Hat Enterprise Linux ES version 4 nfs-utils-1.0.6-93.EL4, nfs-utils-1.0.6-93.EL4.i386, nfs-utils-1.0.6-93.EL4.ia64
    • Red Hat Enterprise Linux WS version 4 nfs-utils-1.0.6-93.EL4, nfs-utils-1.0.6-93.EL4.i386, nfs-utils-1.0.6-93.EL4.ia64
  • RHSA-2008:0486 Released 2008-07-31 · Red Hat rating Moderate
    nfs-utils security update
    • Red Hat Enterprise Linux (v. 5 server) nfs-utils-1:1.0.9-35z.el5_2, nfs-utils-1:1.0.9-35z.el5_2.i386, nfs-utils-1:1.0.9-35z.el5_2.ia64 +1
    • Red Hat Enterprise Linux Desktop (v. 5 client) nfs-utils-1:1.0.9-35z.el5_2, nfs-utils-1:1.0.9-35z.el5_2.i386

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2008:0486
Red Hat Enterprise Linux AS version 4Fixed RHSA-2009:0955
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2008:0486
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2009:0955
Red Hat Enterprise Linux ES version 4Fixed RHSA-2009:0955
Red Hat Enterprise Linux WS version 4Fixed RHSA-2009:0955

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-1376
  2. 2026-10-03 Alias added: GHSA-mpmc-v776-vcmf

References

Advisory 2

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences