Joined: 12 May 2004
|Posted: Sat Mar 07, 2009 6:26 pm Post subject: [ GLSA 200903-06 ] nfs-utils: Access restriction bypass
|Gentoo Linux Security Advisory
Title: nfs-utils: Access restriction bypass (GLSA 200903-06)
Date: March 07, 2009
An error in nfs-utils allows for bypass of the netgroups restriction.
nfs-utils contains the client and daemon implementations for the NFS
Vulnerable: < 1.1.3
Unaffected: >= 1.1.3
Architectures: All supported architectures
Michele Marcionelli reported that nfs-utils invokes the hosts_ctl()
function with the wrong order of arguments, which causes TCP Wrappers
to ignore netgroups.
A remote attacker could bypass intended access restrictions, i.e. NFS
netgroups, and gain access to restricted services.
There is no known workaround at this time.
All nfs-utils users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=net-fs/nfs-utils-1.1.3"
Last edited by GLSA on Fri Nov 09, 2012 4:27 am; edited 2 times in total