Unscored severity · published Oct 14, 2008
CVE-2008-4552
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
Nfs-utils · Nfs
through 1.1.2; 0.2; 0.2.1; 0.3.1; 0.3.3; 1.0; +20 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4552
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4552
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
Vendor Advisory
http://secunia.com/advisories/32346
Vendor Advisory
http://secunia.com/advisories/32481
Vendor Advisory
http://secunia.com/advisories/33006
secunia.com
http://secunia.com/advisories/36538
Vendor Advisory
http://secunia.com/advisories/38794
More from Nfs-utils
–
CVE-2009-0180
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to…
–
CVE-2004-0946
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and…
–
CVE-2004-1014
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection…
–
CVE-2004-0154
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup…