Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2008-1376
Vulnerability from cvelistv5
Published
2008-08-01 14:00
Modified
2024-08-07 08:17
Severity ?
EPSS score ?
Summary
A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-07T08:17:34.578Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "redhat-nfsutils-weak-security(44256)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", }, { name: "1020589", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id?1020589", }, { name: "31322", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/31322", }, { name: "RHSA-2008:0486", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", }, { name: "oval:org.mitre.oval:def:10638", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", }, { name: "RHSA-2009:0955", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", }, { name: "30466", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/30466", }, { name: "35162", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/35162", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2008-07-31T00:00:00", descriptions: [ { lang: "en", value: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-09-28T12:57:01", orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", shortName: "redhat", }, references: [ { name: "redhat-nfsutils-weak-security(44256)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", }, { name: "1020589", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id?1020589", }, { name: "31322", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/31322", }, { name: "RHSA-2008:0486", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", }, { name: "oval:org.mitre.oval:def:10638", tags: [ "vdb-entry", "signature", "x_refsource_OVAL", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", }, { name: "RHSA-2009:0955", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", }, { name: "30466", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/30466", }, { name: "35162", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/35162", }, ], }, }, cveMetadata: { assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", assignerShortName: "redhat", cveId: "CVE-2008-1376", datePublished: "2008-08-01T14:00:00", dateReserved: "2008-03-18T00:00:00", dateUpdated: "2024-08-07T08:17:34.578Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2008-1376\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2008-08-01T14:41:00.000\",\"lastModified\":\"2024-11-21T00:44:24.210\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.\"},{\"lang\":\"es\",\"value\":\"Ciertas secuencias de comandos web usadas para \\\"construir\\\" nfs-utils anterior a 1.0.9-35z.el5_2 sobre Red Hat Enterprise Linux (RHEL) 5 omite soporte de paquetes TCP, los cuales permiten a atacantes remotos saltarse las restricciones de acceso previstas.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*\",\"matchCriteriaId\":\"3AA8F2EC-55E9-4529-A816-B5D495605F6B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*\",\"matchCriteriaId\":\"40D71CBC-D365-4710-BAB5-8A1159F35E41\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:nfs_utils:1.0.9:35z.el5_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6BEB267-7508-42E5-A557-241F437134A7\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/31322\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/35162\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0486.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0955.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/30466\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id?1020589\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44256\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/31322\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/35162\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2008-0486.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0955.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/30466\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1020589\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/44256\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
rhsa-2008_0486
Vulnerability from csaf_redhat
Published
2008-07-31 15:38
Modified
2024-11-22 02:00
Summary
Red Hat Security Advisory: nfs-utils security update
Notes
Topic
An updated nfs-utils package that fixes a security issue is now available
for Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
The nfs-utils package provides a daemon for the kernel NFS server and
related tools.
A flaw was found in the nfs-utils package build. The nfs-utils package was
missing TCP wrappers support, which could result in an administrator
believing they had access restrictions enabled when they did not.
(CVE-2008-1376)
Users of nfs-utils are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated nfs-utils package that fixes a security issue is now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The nfs-utils package provides a daemon for the kernel NFS server and\nrelated tools.\n\nA flaw was found in the nfs-utils package build. The nfs-utils package was\nmissing TCP wrappers support, which could result in an administrator\nbelieving they had access restrictions enabled when they did not.\n(CVE-2008-1376)\n\nUsers of nfs-utils are advised to upgrade to these updated packages, which\ncontain a backported patch to resolve this issue.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2008:0486", url: "https://access.redhat.com/errata/RHSA-2008:0486", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0486.json", }, ], title: "Red Hat Security Advisory: nfs-utils security update", tracking: { current_release_date: "2024-11-22T02:00:17+00:00", generator: { date: "2024-11-22T02:00:17+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2008:0486", initial_release_date: "2008-07-31T15:38:00+00:00", revision_history: [ { date: "2008-07-31T15:38:00+00:00", number: "1", summary: "Initial version", }, { date: "2008-07-31T11:46:33+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:00:17+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product_id: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=x86_64&epoch=1", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=i386&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.i386", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386", product_id: "nfs-utils-1:1.0.9-35z.el5_2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=i386&epoch=1", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.src", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.src", product_id: "nfs-utils-1:1.0.9-35z.el5_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=src&epoch=1", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=ia64&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product_id: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=ia64&epoch=1", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=ppc&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product_id: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=ppc&epoch=1", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product_id: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=s390x&epoch=1", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2008-1376", discovery_date: "2008-04-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "440114", }, ], notes: [ { category: "description", text: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", title: "Vulnerability description", }, { category: "summary", text: "nfs-utils: missing tcp_wrappers support", title: "Vulnerability summary", }, ], product_status: { fixed: [ "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-1376", }, { category: "external", summary: "RHBZ#440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-1376", url: "https://www.cve.org/CVERecord?id=CVE-2008-1376", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", }, ], release_date: "2008-07-31T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2008-07-31T15:38:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. \n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188", product_ids: [ "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2008:0486", }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "nfs-utils: missing tcp_wrappers support", }, ], }
rhsa-2009_0955
Vulnerability from csaf_redhat
Published
2009-05-18 13:24
Modified
2024-11-22 02:00
Summary
Red Hat Security Advisory: nfs-utils security and bug fix update
Notes
Topic
An updated nfs-utils package that fixes a security issue and multiple bugs
is now available for Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
The nfs-utils package provides a daemon for the kernel NFS server and
related tools, which provides a much higher level of performance than the
traditional Linux NFS server used by most users.
A flaw was found in the nfs-utils package provided by RHBA-2008:0742. The
nfs-utils package was missing TCP wrappers support, which could result in
an administrator believing they had access restrictions enabled when they
did not. (CVE-2008-1376)
This update also includes the following bug fixes:
* the "nfsstat" command now displays correct statistics. In previous
versions, performing more than 2^31 RPC calls could cause the "nfsstat"
command to incorrectly display the number of calls as "negative". This was
because "nfsstat" printed statistics from /proc/net/rpc/* files as signed
integers; with this version of nfs-utils, "nfsstat" now reads and prints
these statistics as unsigned integers. (BZ#404831)
* imapd upcalls now support zero-length reads and perform extra bounds
checking in gssd and svcgssd. This fixes a bug in previous versions that
could cause the rpc.imapd daemon to hang when communicating with the
kernel, which would halt any ID translation services. (BZ#448710)
* tcp_wrappers supported in nfs-utils now allows proper application of
hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny. (BZ#494585)
* the nfs init script did not check whether SECURE_NFS was set to "yes"
before starting, stopping, or querying rpc.svcgssd. On systems where
SECURE_NFS was not set to "yes", the nfs init script could not start the
rpc.svcgssd daemon at the "service nfs start" command because the rpcsvcssd
init script would check the status of SECURE_NFS before starting the
daemon. However, at the "service nfs stop" or "service nfs restart"
commands, nfs init script would attempt to stop rpc.svcgssd and then report
a failure because the daemon was not running in the first place. These
error messages may have misled end-users into believing that there was a
genuine problem with their NFS configuration. This version of nfs-utils
contains a fix backported from Red Hat Enterprise Linux 5. nfs-utils now
checks the status of SECURE_NFS before the nfs init script attempts to
start, query or stop rpc.svcgssd and therefore, the irrelevant error
messages seen previously will not appear. (BZ#470423)
* the nfs init script is now fully compliant with Linux Standard Base Core
specifications. This update fixes a bug that prevented "/etc/init.d/nfs
start" from exiting properly if NFS was already running. (BZ#474570)
* /var/lib/nfs/statd/sm is now created with the proper user and group
whenever rpc.statd is called. In previous versions, some thread stack
conditions could incorrectly prevent rpc.statd from creating the
/var/lib/nfs/statd/sm file, which could cause "service nfslock start" to
fail. (BZ#479376)
All users of nfs-utils should upgrade to this updated package, which
resolves these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated nfs-utils package that fixes a security issue and multiple bugs\nis now available for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The nfs-utils package provides a daemon for the kernel NFS server and\nrelated tools, which provides a much higher level of performance than the\ntraditional Linux NFS server used by most users.\n\nA flaw was found in the nfs-utils package provided by RHBA-2008:0742. The\nnfs-utils package was missing TCP wrappers support, which could result in\nan administrator believing they had access restrictions enabled when they\ndid not. (CVE-2008-1376)\n\nThis update also includes the following bug fixes:\n\n* the \"nfsstat\" command now displays correct statistics. In previous\nversions, performing more than 2^31 RPC calls could cause the \"nfsstat\"\ncommand to incorrectly display the number of calls as \"negative\". This was\nbecause \"nfsstat\" printed statistics from /proc/net/rpc/* files as signed\nintegers; with this version of nfs-utils, \"nfsstat\" now reads and prints\nthese statistics as unsigned integers. (BZ#404831)\n\n* imapd upcalls now support zero-length reads and perform extra bounds\nchecking in gssd and svcgssd. This fixes a bug in previous versions that\ncould cause the rpc.imapd daemon to hang when communicating with the\nkernel, which would halt any ID translation services. (BZ#448710)\n\n* tcp_wrappers supported in nfs-utils now allows proper application of\nhosts access rules defined in /etc/hosts.allow and /etc/hosts.deny. (BZ#494585)\n\n* the nfs init script did not check whether SECURE_NFS was set to \"yes\"\nbefore starting, stopping, or querying rpc.svcgssd. On systems where\nSECURE_NFS was not set to \"yes\", the nfs init script could not start the\nrpc.svcgssd daemon at the \"service nfs start\" command because the rpcsvcssd\ninit script would check the status of SECURE_NFS before starting the\ndaemon. However, at the \"service nfs stop\" or \"service nfs restart\"\ncommands, nfs init script would attempt to stop rpc.svcgssd and then report\na failure because the daemon was not running in the first place. These\nerror messages may have misled end-users into believing that there was a\ngenuine problem with their NFS configuration. This version of nfs-utils\ncontains a fix backported from Red Hat Enterprise Linux 5. nfs-utils now\nchecks the status of SECURE_NFS before the nfs init script attempts to\nstart, query or stop rpc.svcgssd and therefore, the irrelevant error\nmessages seen previously will not appear. (BZ#470423)\n\n* the nfs init script is now fully compliant with Linux Standard Base Core\nspecifications. This update fixes a bug that prevented \"/etc/init.d/nfs\nstart\" from exiting properly if NFS was already running. (BZ#474570)\n\n* /var/lib/nfs/statd/sm is now created with the proper user and group\nwhenever rpc.statd is called. In previous versions, some thread stack\nconditions could incorrectly prevent rpc.statd from creating the\n/var/lib/nfs/statd/sm file, which could cause \"service nfslock start\" to\nfail. (BZ#479376)\n\nAll users of nfs-utils should upgrade to this updated package, which\nresolves these issues.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0955", url: "https://access.redhat.com/errata/RHSA-2009:0955", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "404831", url: "https://bugzilla.redhat.com/show_bug.cgi?id=404831", }, { category: "external", summary: "440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "461043", url: "https://bugzilla.redhat.com/show_bug.cgi?id=461043", }, { category: "external", summary: "474570", url: "https://bugzilla.redhat.com/show_bug.cgi?id=474570", }, { category: "external", summary: "479376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=479376", }, { category: "external", summary: "494585", url: "https://bugzilla.redhat.com/show_bug.cgi?id=494585", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0955.json", }, ], title: "Red Hat Security Advisory: nfs-utils security and bug fix update", tracking: { current_release_date: "2024-11-22T02:00:21+00:00", generator: { date: "2024-11-22T02:00:21+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0955", initial_release_date: "2009-05-18T13:24:00+00:00", revision_history: [ { date: "2009-05-18T13:24:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-05-18T09:24:03+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:00:21+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS version 4", product: { name: "Red Hat Enterprise Linux AS version 4", product_id: "4AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::as", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop version 4", product: { name: "Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 4", product: { name: "Red Hat Enterprise Linux ES version 4", product_id: "4ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 4", product: { name: "Red Hat Enterprise Linux WS version 4", product_id: "4WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::ws", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.ia64", product: { name: "nfs-utils-0:1.0.6-93.EL4.ia64", product_id: "nfs-utils-0:1.0.6-93.EL4.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=ia64", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.src", product: { name: "nfs-utils-0:1.0.6-93.EL4.src", product_id: "nfs-utils-0:1.0.6-93.EL4.src", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.x86_64", product: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64", product_id: "nfs-utils-0:1.0.6-93.EL4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=x86_64", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.i386", product: { name: "nfs-utils-0:1.0.6-93.EL4.i386", product_id: "nfs-utils-0:1.0.6-93.EL4.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=i386", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.ppc", product: { name: "nfs-utils-0:1.0.6-93.EL4.ppc", product_id: "nfs-utils-0:1.0.6-93.EL4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=ppc", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.s390x", product: { name: "nfs-utils-0:1.0.6-93.EL4.s390x", product_id: "nfs-utils-0:1.0.6-93.EL4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=s390x", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.s390", product: { name: "nfs-utils-0:1.0.6-93.EL4.s390", product_id: "nfs-utils-0:1.0.6-93.EL4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=s390", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4WS", }, ], }, vulnerabilities: [ { cve: "CVE-2008-1376", discovery_date: "2008-04-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "440114", }, ], notes: [ { category: "description", text: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", title: "Vulnerability description", }, { category: "summary", text: "nfs-utils: missing tcp_wrappers support", title: "Vulnerability summary", }, ], product_status: { fixed: [ "4AS:nfs-utils-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-0:1.0.6-93.EL4.src", "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-0:1.0.6-93.EL4.src", "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-0:1.0.6-93.EL4.src", "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-1376", }, { category: "external", summary: "RHBZ#440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-1376", url: "https://www.cve.org/CVERecord?id=CVE-2008-1376", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", }, ], release_date: "2008-07-31T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-05-18T13:24:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS:nfs-utils-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-0:1.0.6-93.EL4.src", "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-0:1.0.6-93.EL4.src", "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-0:1.0.6-93.EL4.src", "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0955", }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "nfs-utils: missing tcp_wrappers support", }, ], }
rhsa-2008:0486
Vulnerability from csaf_redhat
Published
2008-07-31 15:38
Modified
2024-11-22 02:00
Summary
Red Hat Security Advisory: nfs-utils security update
Notes
Topic
An updated nfs-utils package that fixes a security issue is now available
for Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
The nfs-utils package provides a daemon for the kernel NFS server and
related tools.
A flaw was found in the nfs-utils package build. The nfs-utils package was
missing TCP wrappers support, which could result in an administrator
believing they had access restrictions enabled when they did not.
(CVE-2008-1376)
Users of nfs-utils are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated nfs-utils package that fixes a security issue is now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The nfs-utils package provides a daemon for the kernel NFS server and\nrelated tools.\n\nA flaw was found in the nfs-utils package build. The nfs-utils package was\nmissing TCP wrappers support, which could result in an administrator\nbelieving they had access restrictions enabled when they did not.\n(CVE-2008-1376)\n\nUsers of nfs-utils are advised to upgrade to these updated packages, which\ncontain a backported patch to resolve this issue.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2008:0486", url: "https://access.redhat.com/errata/RHSA-2008:0486", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0486.json", }, ], title: "Red Hat Security Advisory: nfs-utils security update", tracking: { current_release_date: "2024-11-22T02:00:17+00:00", generator: { date: "2024-11-22T02:00:17+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2008:0486", initial_release_date: "2008-07-31T15:38:00+00:00", revision_history: [ { date: "2008-07-31T15:38:00+00:00", number: "1", summary: "Initial version", }, { date: "2008-07-31T11:46:33+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:00:17+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product_id: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=x86_64&epoch=1", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=i386&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.i386", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386", product_id: "nfs-utils-1:1.0.9-35z.el5_2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=i386&epoch=1", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.src", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.src", product_id: "nfs-utils-1:1.0.9-35z.el5_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=src&epoch=1", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=ia64&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product_id: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=ia64&epoch=1", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=ppc&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product_id: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=ppc&epoch=1", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product_id: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=s390x&epoch=1", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2008-1376", discovery_date: "2008-04-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "440114", }, ], notes: [ { category: "description", text: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", title: "Vulnerability description", }, { category: "summary", text: "nfs-utils: missing tcp_wrappers support", title: "Vulnerability summary", }, ], product_status: { fixed: [ "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-1376", }, { category: "external", summary: "RHBZ#440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-1376", url: "https://www.cve.org/CVERecord?id=CVE-2008-1376", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", }, ], release_date: "2008-07-31T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2008-07-31T15:38:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. \n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188", product_ids: [ "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2008:0486", }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "nfs-utils: missing tcp_wrappers support", }, ], }
rhsa-2009:0955
Vulnerability from csaf_redhat
Published
2009-05-18 13:24
Modified
2024-11-22 02:00
Summary
Red Hat Security Advisory: nfs-utils security and bug fix update
Notes
Topic
An updated nfs-utils package that fixes a security issue and multiple bugs
is now available for Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
The nfs-utils package provides a daemon for the kernel NFS server and
related tools, which provides a much higher level of performance than the
traditional Linux NFS server used by most users.
A flaw was found in the nfs-utils package provided by RHBA-2008:0742. The
nfs-utils package was missing TCP wrappers support, which could result in
an administrator believing they had access restrictions enabled when they
did not. (CVE-2008-1376)
This update also includes the following bug fixes:
* the "nfsstat" command now displays correct statistics. In previous
versions, performing more than 2^31 RPC calls could cause the "nfsstat"
command to incorrectly display the number of calls as "negative". This was
because "nfsstat" printed statistics from /proc/net/rpc/* files as signed
integers; with this version of nfs-utils, "nfsstat" now reads and prints
these statistics as unsigned integers. (BZ#404831)
* imapd upcalls now support zero-length reads and perform extra bounds
checking in gssd and svcgssd. This fixes a bug in previous versions that
could cause the rpc.imapd daemon to hang when communicating with the
kernel, which would halt any ID translation services. (BZ#448710)
* tcp_wrappers supported in nfs-utils now allows proper application of
hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny. (BZ#494585)
* the nfs init script did not check whether SECURE_NFS was set to "yes"
before starting, stopping, or querying rpc.svcgssd. On systems where
SECURE_NFS was not set to "yes", the nfs init script could not start the
rpc.svcgssd daemon at the "service nfs start" command because the rpcsvcssd
init script would check the status of SECURE_NFS before starting the
daemon. However, at the "service nfs stop" or "service nfs restart"
commands, nfs init script would attempt to stop rpc.svcgssd and then report
a failure because the daemon was not running in the first place. These
error messages may have misled end-users into believing that there was a
genuine problem with their NFS configuration. This version of nfs-utils
contains a fix backported from Red Hat Enterprise Linux 5. nfs-utils now
checks the status of SECURE_NFS before the nfs init script attempts to
start, query or stop rpc.svcgssd and therefore, the irrelevant error
messages seen previously will not appear. (BZ#470423)
* the nfs init script is now fully compliant with Linux Standard Base Core
specifications. This update fixes a bug that prevented "/etc/init.d/nfs
start" from exiting properly if NFS was already running. (BZ#474570)
* /var/lib/nfs/statd/sm is now created with the proper user and group
whenever rpc.statd is called. In previous versions, some thread stack
conditions could incorrectly prevent rpc.statd from creating the
/var/lib/nfs/statd/sm file, which could cause "service nfslock start" to
fail. (BZ#479376)
All users of nfs-utils should upgrade to this updated package, which
resolves these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated nfs-utils package that fixes a security issue and multiple bugs\nis now available for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The nfs-utils package provides a daemon for the kernel NFS server and\nrelated tools, which provides a much higher level of performance than the\ntraditional Linux NFS server used by most users.\n\nA flaw was found in the nfs-utils package provided by RHBA-2008:0742. The\nnfs-utils package was missing TCP wrappers support, which could result in\nan administrator believing they had access restrictions enabled when they\ndid not. (CVE-2008-1376)\n\nThis update also includes the following bug fixes:\n\n* the \"nfsstat\" command now displays correct statistics. In previous\nversions, performing more than 2^31 RPC calls could cause the \"nfsstat\"\ncommand to incorrectly display the number of calls as \"negative\". This was\nbecause \"nfsstat\" printed statistics from /proc/net/rpc/* files as signed\nintegers; with this version of nfs-utils, \"nfsstat\" now reads and prints\nthese statistics as unsigned integers. (BZ#404831)\n\n* imapd upcalls now support zero-length reads and perform extra bounds\nchecking in gssd and svcgssd. This fixes a bug in previous versions that\ncould cause the rpc.imapd daemon to hang when communicating with the\nkernel, which would halt any ID translation services. (BZ#448710)\n\n* tcp_wrappers supported in nfs-utils now allows proper application of\nhosts access rules defined in /etc/hosts.allow and /etc/hosts.deny. (BZ#494585)\n\n* the nfs init script did not check whether SECURE_NFS was set to \"yes\"\nbefore starting, stopping, or querying rpc.svcgssd. On systems where\nSECURE_NFS was not set to \"yes\", the nfs init script could not start the\nrpc.svcgssd daemon at the \"service nfs start\" command because the rpcsvcssd\ninit script would check the status of SECURE_NFS before starting the\ndaemon. However, at the \"service nfs stop\" or \"service nfs restart\"\ncommands, nfs init script would attempt to stop rpc.svcgssd and then report\na failure because the daemon was not running in the first place. These\nerror messages may have misled end-users into believing that there was a\ngenuine problem with their NFS configuration. This version of nfs-utils\ncontains a fix backported from Red Hat Enterprise Linux 5. nfs-utils now\nchecks the status of SECURE_NFS before the nfs init script attempts to\nstart, query or stop rpc.svcgssd and therefore, the irrelevant error\nmessages seen previously will not appear. (BZ#470423)\n\n* the nfs init script is now fully compliant with Linux Standard Base Core\nspecifications. This update fixes a bug that prevented \"/etc/init.d/nfs\nstart\" from exiting properly if NFS was already running. (BZ#474570)\n\n* /var/lib/nfs/statd/sm is now created with the proper user and group\nwhenever rpc.statd is called. In previous versions, some thread stack\nconditions could incorrectly prevent rpc.statd from creating the\n/var/lib/nfs/statd/sm file, which could cause \"service nfslock start\" to\nfail. (BZ#479376)\n\nAll users of nfs-utils should upgrade to this updated package, which\nresolves these issues.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0955", url: "https://access.redhat.com/errata/RHSA-2009:0955", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "404831", url: "https://bugzilla.redhat.com/show_bug.cgi?id=404831", }, { category: "external", summary: "440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "461043", url: "https://bugzilla.redhat.com/show_bug.cgi?id=461043", }, { category: "external", summary: "474570", url: "https://bugzilla.redhat.com/show_bug.cgi?id=474570", }, { category: "external", summary: "479376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=479376", }, { category: "external", summary: "494585", url: "https://bugzilla.redhat.com/show_bug.cgi?id=494585", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0955.json", }, ], title: "Red Hat Security Advisory: nfs-utils security and bug fix update", tracking: { current_release_date: "2024-11-22T02:00:21+00:00", generator: { date: "2024-11-22T02:00:21+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0955", initial_release_date: "2009-05-18T13:24:00+00:00", revision_history: [ { date: "2009-05-18T13:24:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-05-18T09:24:03+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:00:21+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS version 4", product: { name: "Red Hat Enterprise Linux AS version 4", product_id: "4AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::as", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop version 4", product: { name: "Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 4", product: { name: "Red Hat Enterprise Linux ES version 4", product_id: "4ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 4", product: { name: "Red Hat Enterprise Linux WS version 4", product_id: "4WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::ws", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.ia64", product: { name: "nfs-utils-0:1.0.6-93.EL4.ia64", product_id: "nfs-utils-0:1.0.6-93.EL4.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=ia64", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.src", product: { name: "nfs-utils-0:1.0.6-93.EL4.src", product_id: "nfs-utils-0:1.0.6-93.EL4.src", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.x86_64", product: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64", product_id: "nfs-utils-0:1.0.6-93.EL4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=x86_64", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.i386", product: { name: "nfs-utils-0:1.0.6-93.EL4.i386", product_id: "nfs-utils-0:1.0.6-93.EL4.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=i386", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.ppc", product: { name: "nfs-utils-0:1.0.6-93.EL4.ppc", product_id: "nfs-utils-0:1.0.6-93.EL4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=ppc", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.s390x", product: { name: "nfs-utils-0:1.0.6-93.EL4.s390x", product_id: "nfs-utils-0:1.0.6-93.EL4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=s390x", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.s390", product: { name: "nfs-utils-0:1.0.6-93.EL4.s390", product_id: "nfs-utils-0:1.0.6-93.EL4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=s390", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4WS", }, ], }, vulnerabilities: [ { cve: "CVE-2008-1376", discovery_date: "2008-04-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "440114", }, ], notes: [ { category: "description", text: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", title: "Vulnerability description", }, { category: "summary", text: "nfs-utils: missing tcp_wrappers support", title: "Vulnerability summary", }, ], product_status: { fixed: [ "4AS:nfs-utils-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-0:1.0.6-93.EL4.src", "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-0:1.0.6-93.EL4.src", "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-0:1.0.6-93.EL4.src", "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-1376", }, { category: "external", summary: "RHBZ#440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-1376", url: "https://www.cve.org/CVERecord?id=CVE-2008-1376", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", }, ], release_date: "2008-07-31T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-05-18T13:24:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS:nfs-utils-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-0:1.0.6-93.EL4.src", "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-0:1.0.6-93.EL4.src", "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-0:1.0.6-93.EL4.src", "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0955", }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "nfs-utils: missing tcp_wrappers support", }, ], }
RHSA-2008:0486
Vulnerability from csaf_redhat
Published
2008-07-31 15:38
Modified
2024-11-22 02:00
Summary
Red Hat Security Advisory: nfs-utils security update
Notes
Topic
An updated nfs-utils package that fixes a security issue is now available
for Red Hat Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
The nfs-utils package provides a daemon for the kernel NFS server and
related tools.
A flaw was found in the nfs-utils package build. The nfs-utils package was
missing TCP wrappers support, which could result in an administrator
believing they had access restrictions enabled when they did not.
(CVE-2008-1376)
Users of nfs-utils are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated nfs-utils package that fixes a security issue is now available\nfor Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The nfs-utils package provides a daemon for the kernel NFS server and\nrelated tools.\n\nA flaw was found in the nfs-utils package build. The nfs-utils package was\nmissing TCP wrappers support, which could result in an administrator\nbelieving they had access restrictions enabled when they did not.\n(CVE-2008-1376)\n\nUsers of nfs-utils are advised to upgrade to these updated packages, which\ncontain a backported patch to resolve this issue.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2008:0486", url: "https://access.redhat.com/errata/RHSA-2008:0486", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0486.json", }, ], title: "Red Hat Security Advisory: nfs-utils security update", tracking: { current_release_date: "2024-11-22T02:00:17+00:00", generator: { date: "2024-11-22T02:00:17+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2008:0486", initial_release_date: "2008-07-31T15:38:00+00:00", revision_history: [ { date: "2008-07-31T15:38:00+00:00", number: "1", summary: "Initial version", }, { date: "2008-07-31T11:46:33+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:00:17+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product_id: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=x86_64&epoch=1", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=i386&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.i386", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386", product_id: "nfs-utils-1:1.0.9-35z.el5_2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=i386&epoch=1", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.src", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.src", product_id: "nfs-utils-1:1.0.9-35z.el5_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=src&epoch=1", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=ia64&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product_id: "nfs-utils-1:1.0.9-35z.el5_2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=ia64&epoch=1", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=ppc&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product_id: "nfs-utils-1:1.0.9-35z.el5_2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=ppc&epoch=1", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product_id: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.9-35z.el5_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product_id: "nfs-utils-1:1.0.9-35z.el5_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.9-35z.el5_2?arch=s390x&epoch=1", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", }, product_reference: "nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2008-1376", discovery_date: "2008-04-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "440114", }, ], notes: [ { category: "description", text: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", title: "Vulnerability description", }, { category: "summary", text: "nfs-utils: missing tcp_wrappers support", title: "Vulnerability summary", }, ], product_status: { fixed: [ "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-1376", }, { category: "external", summary: "RHBZ#440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-1376", url: "https://www.cve.org/CVERecord?id=CVE-2008-1376", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", }, ], release_date: "2008-07-31T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2008-07-31T15:38:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. \n\nThis update is available via Red Hat Network. Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188", product_ids: [ "5Client:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-1:1.0.9-35z.el5_2.src", "5Client:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Client:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-1:1.0.9-35z.el5_2.src", "5Server:nfs-utils-1:1.0.9-35z.el5_2.x86_64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.i386", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ia64", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.ppc", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.s390x", "5Server:nfs-utils-debuginfo-1:1.0.9-35z.el5_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2008:0486", }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "nfs-utils: missing tcp_wrappers support", }, ], }
RHSA-2009:0955
Vulnerability from csaf_redhat
Published
2009-05-18 13:24
Modified
2024-11-22 02:00
Summary
Red Hat Security Advisory: nfs-utils security and bug fix update
Notes
Topic
An updated nfs-utils package that fixes a security issue and multiple bugs
is now available for Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
The nfs-utils package provides a daemon for the kernel NFS server and
related tools, which provides a much higher level of performance than the
traditional Linux NFS server used by most users.
A flaw was found in the nfs-utils package provided by RHBA-2008:0742. The
nfs-utils package was missing TCP wrappers support, which could result in
an administrator believing they had access restrictions enabled when they
did not. (CVE-2008-1376)
This update also includes the following bug fixes:
* the "nfsstat" command now displays correct statistics. In previous
versions, performing more than 2^31 RPC calls could cause the "nfsstat"
command to incorrectly display the number of calls as "negative". This was
because "nfsstat" printed statistics from /proc/net/rpc/* files as signed
integers; with this version of nfs-utils, "nfsstat" now reads and prints
these statistics as unsigned integers. (BZ#404831)
* imapd upcalls now support zero-length reads and perform extra bounds
checking in gssd and svcgssd. This fixes a bug in previous versions that
could cause the rpc.imapd daemon to hang when communicating with the
kernel, which would halt any ID translation services. (BZ#448710)
* tcp_wrappers supported in nfs-utils now allows proper application of
hosts access rules defined in /etc/hosts.allow and /etc/hosts.deny. (BZ#494585)
* the nfs init script did not check whether SECURE_NFS was set to "yes"
before starting, stopping, or querying rpc.svcgssd. On systems where
SECURE_NFS was not set to "yes", the nfs init script could not start the
rpc.svcgssd daemon at the "service nfs start" command because the rpcsvcssd
init script would check the status of SECURE_NFS before starting the
daemon. However, at the "service nfs stop" or "service nfs restart"
commands, nfs init script would attempt to stop rpc.svcgssd and then report
a failure because the daemon was not running in the first place. These
error messages may have misled end-users into believing that there was a
genuine problem with their NFS configuration. This version of nfs-utils
contains a fix backported from Red Hat Enterprise Linux 5. nfs-utils now
checks the status of SECURE_NFS before the nfs init script attempts to
start, query or stop rpc.svcgssd and therefore, the irrelevant error
messages seen previously will not appear. (BZ#470423)
* the nfs init script is now fully compliant with Linux Standard Base Core
specifications. This update fixes a bug that prevented "/etc/init.d/nfs
start" from exiting properly if NFS was already running. (BZ#474570)
* /var/lib/nfs/statd/sm is now created with the proper user and group
whenever rpc.statd is called. In previous versions, some thread stack
conditions could incorrectly prevent rpc.statd from creating the
/var/lib/nfs/statd/sm file, which could cause "service nfslock start" to
fail. (BZ#479376)
All users of nfs-utils should upgrade to this updated package, which
resolves these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated nfs-utils package that fixes a security issue and multiple bugs\nis now available for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The nfs-utils package provides a daemon for the kernel NFS server and\nrelated tools, which provides a much higher level of performance than the\ntraditional Linux NFS server used by most users.\n\nA flaw was found in the nfs-utils package provided by RHBA-2008:0742. The\nnfs-utils package was missing TCP wrappers support, which could result in\nan administrator believing they had access restrictions enabled when they\ndid not. (CVE-2008-1376)\n\nThis update also includes the following bug fixes:\n\n* the \"nfsstat\" command now displays correct statistics. In previous\nversions, performing more than 2^31 RPC calls could cause the \"nfsstat\"\ncommand to incorrectly display the number of calls as \"negative\". This was\nbecause \"nfsstat\" printed statistics from /proc/net/rpc/* files as signed\nintegers; with this version of nfs-utils, \"nfsstat\" now reads and prints\nthese statistics as unsigned integers. (BZ#404831)\n\n* imapd upcalls now support zero-length reads and perform extra bounds\nchecking in gssd and svcgssd. This fixes a bug in previous versions that\ncould cause the rpc.imapd daemon to hang when communicating with the\nkernel, which would halt any ID translation services. (BZ#448710)\n\n* tcp_wrappers supported in nfs-utils now allows proper application of\nhosts access rules defined in /etc/hosts.allow and /etc/hosts.deny. (BZ#494585)\n\n* the nfs init script did not check whether SECURE_NFS was set to \"yes\"\nbefore starting, stopping, or querying rpc.svcgssd. On systems where\nSECURE_NFS was not set to \"yes\", the nfs init script could not start the\nrpc.svcgssd daemon at the \"service nfs start\" command because the rpcsvcssd\ninit script would check the status of SECURE_NFS before starting the\ndaemon. However, at the \"service nfs stop\" or \"service nfs restart\"\ncommands, nfs init script would attempt to stop rpc.svcgssd and then report\na failure because the daemon was not running in the first place. These\nerror messages may have misled end-users into believing that there was a\ngenuine problem with their NFS configuration. This version of nfs-utils\ncontains a fix backported from Red Hat Enterprise Linux 5. nfs-utils now\nchecks the status of SECURE_NFS before the nfs init script attempts to\nstart, query or stop rpc.svcgssd and therefore, the irrelevant error\nmessages seen previously will not appear. (BZ#470423)\n\n* the nfs init script is now fully compliant with Linux Standard Base Core\nspecifications. This update fixes a bug that prevented \"/etc/init.d/nfs\nstart\" from exiting properly if NFS was already running. (BZ#474570)\n\n* /var/lib/nfs/statd/sm is now created with the proper user and group\nwhenever rpc.statd is called. In previous versions, some thread stack\nconditions could incorrectly prevent rpc.statd from creating the\n/var/lib/nfs/statd/sm file, which could cause \"service nfslock start\" to\nfail. (BZ#479376)\n\nAll users of nfs-utils should upgrade to this updated package, which\nresolves these issues.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0955", url: "https://access.redhat.com/errata/RHSA-2009:0955", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "404831", url: "https://bugzilla.redhat.com/show_bug.cgi?id=404831", }, { category: "external", summary: "440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "461043", url: "https://bugzilla.redhat.com/show_bug.cgi?id=461043", }, { category: "external", summary: "474570", url: "https://bugzilla.redhat.com/show_bug.cgi?id=474570", }, { category: "external", summary: "479376", url: "https://bugzilla.redhat.com/show_bug.cgi?id=479376", }, { category: "external", summary: "494585", url: "https://bugzilla.redhat.com/show_bug.cgi?id=494585", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0955.json", }, ], title: "Red Hat Security Advisory: nfs-utils security and bug fix update", tracking: { current_release_date: "2024-11-22T02:00:21+00:00", generator: { date: "2024-11-22T02:00:21+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0955", initial_release_date: "2009-05-18T13:24:00+00:00", revision_history: [ { date: "2009-05-18T13:24:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-05-18T09:24:03+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:00:21+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS version 4", product: { name: "Red Hat Enterprise Linux AS version 4", product_id: "4AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::as", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop version 4", product: { name: "Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 4", product: { name: "Red Hat Enterprise Linux ES version 4", product_id: "4ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 4", product: { name: "Red Hat Enterprise Linux WS version 4", product_id: "4WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::ws", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.ia64", product: { name: "nfs-utils-0:1.0.6-93.EL4.ia64", product_id: "nfs-utils-0:1.0.6-93.EL4.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=ia64", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.src", product: { name: "nfs-utils-0:1.0.6-93.EL4.src", product_id: "nfs-utils-0:1.0.6-93.EL4.src", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.x86_64", product: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64", product_id: "nfs-utils-0:1.0.6-93.EL4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=x86_64", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.i386", product: { name: "nfs-utils-0:1.0.6-93.EL4.i386", product_id: "nfs-utils-0:1.0.6-93.EL4.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=i386", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.ppc", product: { name: "nfs-utils-0:1.0.6-93.EL4.ppc", product_id: "nfs-utils-0:1.0.6-93.EL4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=ppc", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.s390x", product: { name: "nfs-utils-0:1.0.6-93.EL4.s390x", product_id: "nfs-utils-0:1.0.6-93.EL4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=s390x", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "nfs-utils-0:1.0.6-93.EL4.s390", product: { name: "nfs-utils-0:1.0.6-93.EL4.s390", product_id: "nfs-utils-0:1.0.6-93.EL4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils@1.0.6-93.EL4?arch=s390", }, }, }, { category: "product_version", name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product_id: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/nfs-utils-debuginfo@1.0.6-93.EL4?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.src as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.src", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.src", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", }, product_reference: "nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", relates_to_product_reference: "4WS", }, ], }, vulnerabilities: [ { cve: "CVE-2008-1376", discovery_date: "2008-04-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "440114", }, ], notes: [ { category: "description", text: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", title: "Vulnerability description", }, { category: "summary", text: "nfs-utils: missing tcp_wrappers support", title: "Vulnerability summary", }, ], product_status: { fixed: [ "4AS:nfs-utils-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-0:1.0.6-93.EL4.src", "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-0:1.0.6-93.EL4.src", "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-0:1.0.6-93.EL4.src", "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-1376", }, { category: "external", summary: "RHBZ#440114", url: "https://bugzilla.redhat.com/show_bug.cgi?id=440114", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-1376", url: "https://www.cve.org/CVERecord?id=CVE-2008-1376", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", }, ], release_date: "2008-07-31T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-05-18T13:24:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "4AS:nfs-utils-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-0:1.0.6-93.EL4.src", "4AS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4AS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-0:1.0.6-93.EL4.src", "4Desktop:nfs-utils-0:1.0.6-93.EL4.x86_64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4Desktop:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-0:1.0.6-93.EL4.src", "4ES:nfs-utils-0:1.0.6-93.EL4.x86_64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4ES:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-0:1.0.6-93.EL4.src", "4WS:nfs-utils-0:1.0.6-93.EL4.x86_64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.i386", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ia64", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.ppc", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.s390x", "4WS:nfs-utils-debuginfo-0:1.0.6-93.EL4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0955", }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "nfs-utils: missing tcp_wrappers support", }, ], }
fkie_cve-2008-1376
Vulnerability from fkie_nvd
Published
2008-08-01 14:41
Modified
2024-11-21 00:44
Severity ?
Summary
A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
redhat | enterprise_linux | 5.0 | |
redhat | enterprise_linux | 5.0 | |
redhat | nfs_utils | 1.0.9 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*", matchCriteriaId: "3AA8F2EC-55E9-4529-A816-B5D495605F6B", vulnerable: false, }, { criteria: "cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*", matchCriteriaId: "40D71CBC-D365-4710-BAB5-8A1159F35E41", vulnerable: false, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:a:redhat:nfs_utils:1.0.9:35z.el5_2:*:*:*:*:*:*", matchCriteriaId: "C6BEB267-7508-42E5-A557-241F437134A7", vulnerable: true, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", }, { lang: "es", value: "Ciertas secuencias de comandos web usadas para \"construir\" nfs-utils anterior a 1.0.9-35z.el5_2 sobre Red Hat Enterprise Linux (RHEL) 5 omite soporte de paquetes TCP, los cuales permiten a atacantes remotos saltarse las restricciones de acceso previstas.", }, ], id: "CVE-2008-1376", lastModified: "2024-11-21T00:44:24.210", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2008-08-01T14:41:00.000", references: [ { source: "secalert@redhat.com", url: "http://secunia.com/advisories/31322", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/35162", }, { source: "secalert@redhat.com", url: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", }, { source: "secalert@redhat.com", url: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", }, { source: "secalert@redhat.com", url: "http://www.securityfocus.com/bid/30466", }, { source: "secalert@redhat.com", url: "http://www.securitytracker.com/id?1020589", }, { source: "secalert@redhat.com", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", }, { source: "secalert@redhat.com", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/31322", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/35162", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/30466", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id?1020589", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", }, ], sourceIdentifier: "secalert@redhat.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-264", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
gsd-2008-1376
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.
Aliases
Aliases
{ GSD: { alias: "CVE-2008-1376", description: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", id: "GSD-2008-1376", references: [ "https://www.suse.com/security/cve/CVE-2008-1376.html", "https://access.redhat.com/errata/RHSA-2009:0955", "https://access.redhat.com/errata/RHSA-2008:0486", "https://linux.oracle.com/cve/CVE-2008-1376.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2008-1376", ], details: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", id: "GSD-2008-1376", modified: "2023-12-13T01:23:02.707458Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2008-1376", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_affected: "=", version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "http://secunia.com/advisories/31322", refsource: "MISC", url: "http://secunia.com/advisories/31322", }, { name: "http://secunia.com/advisories/35162", refsource: "MISC", url: "http://secunia.com/advisories/35162", }, { name: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", refsource: "MISC", url: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", }, { name: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", refsource: "MISC", url: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", }, { name: "http://www.securityfocus.com/bid/30466", refsource: "MISC", url: "http://www.securityfocus.com/bid/30466", }, { name: "http://www.securitytracker.com/id?1020589", refsource: "MISC", url: "http://www.securitytracker.com/id?1020589", }, { name: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", refsource: "MISC", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", }, { name: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", refsource: "MISC", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux:5.0:*:client:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:redhat:nfs_utils:1.0.9:35z.el5_2:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2008-1376", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-264", }, ], }, ], }, references: { reference_data: [ { name: "RHSA-2008:0486", refsource: "REDHAT", tags: [], url: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", }, { name: "30466", refsource: "BID", tags: [], url: "http://www.securityfocus.com/bid/30466", }, { name: "1020589", refsource: "SECTRACK", tags: [], url: "http://www.securitytracker.com/id?1020589", }, { name: "31322", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/31322", }, { name: "RHSA-2009:0955", refsource: "REDHAT", tags: [], url: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", }, { name: "35162", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/35162", }, { name: "redhat-nfsutils-weak-security(44256)", refsource: "XF", tags: [], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", }, { name: "oval:org.mitre.oval:def:10638", refsource: "OVAL", tags: [], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", }, ], }, }, impact: { baseMetricV2: { cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "HIGH", userInteractionRequired: false, }, }, lastModifiedDate: "2017-09-29T01:30Z", publishedDate: "2008-08-01T14:41Z", }, }, }
ghsa-mpmc-v776-vcmf
Vulnerability from github
Published
2022-05-01 23:39
Modified
2022-05-01 23:39
Details
A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.
{ affected: [], aliases: [ "CVE-2008-1376", ], database_specific: { cwe_ids: [], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2008-08-01T14:41:00Z", severity: "HIGH", }, details: "A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions.", id: "GHSA-mpmc-v776-vcmf", modified: "2022-05-01T23:39:33Z", published: "2022-05-01T23:39:33Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-1376", }, { type: "WEB", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/44256", }, { type: "WEB", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10638", }, { type: "WEB", url: "http://secunia.com/advisories/31322", }, { type: "WEB", url: "http://secunia.com/advisories/35162", }, { type: "WEB", url: "http://www.redhat.com/support/errata/RHSA-2008-0486.html", }, { type: "WEB", url: "http://www.redhat.com/support/errata/RHSA-2009-0955.html", }, { type: "WEB", url: "http://www.securityfocus.com/bid/30466", }, { type: "WEB", url: "http://www.securitytracker.com/id?1020589", }, ], schema_version: "1.4.0", severity: [], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.