The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3…
Priority LOW 37CWE-264Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.
Summary
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
Why it matters now
EPSS 0.02295 83rd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:* | up to 1.1.2 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:* | 0.2 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:* | 0.2.1 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:* | 0.3.1 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:* | 0.3.3 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:* | 1.0.1 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:* | 1.0.3 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:* | 1.0.4 | Vulnerable | Nfs |
- cpe:2.3:a:nfs:nfs-utils:*:*:*:*:*:*:*:* Versions up to 1.1.2 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:0.2.1:*:*:*:*:*:*:* Versions 0.2.1 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:0.3.1:*:*:*:*:*:*:* Versions 0.3.1 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:0.3.3:*:*:*:*:*:*:* Versions 0.3.3 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Nfs
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:* | 1.0.6 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:* | 1.0.7 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:* | 1.0.7 pre-1 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:* | 1.0.7 pre-2 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:* | 1.0.8 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:* | 1.0.8 rc-1 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:* | 1.0.8 rc-2 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:* | 1.0.8 rc-3 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:* | 1.0.8 rc-4 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:* | 1.0.9 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:* | 1.0.10 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:* | 1.0.11 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:* | 1.0.12 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:* | 1.1.0 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:* | 1.1.0 rc-1 | Vulnerable | Nfs |
| cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:* | 1.1.1 | Vulnerable | Nfs |
- cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-1:*:*:*:*:*:* Versions 1.0.7 pre-1 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.7:pre-2:*:*:*:*:*:* Versions 1.0.7 pre-2 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-1:*:*:*:*:*:* Versions 1.0.8 rc-1 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-2:*:*:*:*:*:* Versions 1.0.8 rc-2 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-3:*:*:*:*:*:* Versions 1.0.8 rc-3 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.8:rc-4:*:*:*:*:*:* Versions 1.0.8 rc-4 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.1.0:rc-1:*:*:*:*:*:* Versions 1.1.0 rc-1 Vulnerable ·Nfs
- cpe:2.3:a:nfs:nfs-utils:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Nfs
Remediation
Red Hat 1 advisory
- RHSA-2009:1321 Released 2009-09-02 · Red Hat rating Lownfs-utils security and bug fix update
- Red Hat Enterprise Linux (v. 5 server) nfs-utils-1:1.0.9-42.el5, nfs-utils-1:1.0.9-42.el5.i386, nfs-utils-1:1.0.9-42.el5.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) nfs-utils-1:1.0.9-42.el5, nfs-utils-1:1.0.9-42.el5.i386
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2009:1321 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2009:1321 |
Timeline
- 2026-10-02 Threatist record created from CVE-2008-4552
- 2026-10-03 Alias added: GHSA-jg64-hjmp-ccvg
References
Other 7
- http://wiki.rpath.com/Advisories:rPSA-2008-0307
- oval:org.mitre.oval:def:8325
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates
- [oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers
- https://bugzilla.redhat.com/show_bug.cgi?id=458676
- [oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers
- oval:org.mitre.oval:def:11544
More Nfs-utils vulnerabilities
- TI-2004-00857 rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not… CVSS 2.0HIGH 10.0
- TI-2009-00169 Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before… CVSS 2.0HIGH 7.5
- TI-2004-00920 statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows… CVSS 2.0MEDIUM 5.0
- TI-2004-00130 rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2008-4552 · CVE Program
- CVE-2008-4552 · NVD
- FIRST EPSS
- GHSA-jg64-hjmp-ccvg · GitHub Advisory Database · CC BY 4.0
- CVE-2008-4552 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences