ID CVE-2009-0786
Summary ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This was originally intended for a report about TCP Wrappers and the hosts_ctl API function, but further investigation showed that this was documented behavior by that function. Notes: Future CVE identifiers might be assigned to applications that mis-use the API in a security-relevant fashion.
References
Vulnerable Configurations
CVSS
Base: None
Impact:
Exploitability:
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
redhat via4
advisories
bugzilla
id 491095
title CVE-2009-0786 tcp_wrappers: hosts_ctl() does not handle hostnames specified in /etc/hosts.{allow,deny} correctly
oval
OR
  • comment Red Hat Enterprise Linux must be installed
    oval oval:com.redhat.rhba:tst:20070304026
  • AND
    • comment Red Hat Enterprise Linux 5 is installed
      oval oval:com.redhat.rhba:tst:20070331005
    • comment tcp_wrappers is earlier than 0:7.6-40.4.el5
      oval oval:com.redhat.rhba:tst:20070565001
    • comment tcp_wrappers is signed with Red Hat redhatrelease key
      oval oval:com.redhat.rhba:tst:20070565002
rhsa
id RHBA-2007:0565
released 2007-11-07
severity Moderate
title RHBA-2007:0565: tcp_wrappers bug fix update (Moderate)
rpms
  • tcp_wrappers-0:7.6-40.4.el5
  • tcp_wrappers-debuginfo-0:7.6-40.4.el5
refmap via4
mlist
  • [oss-security] 20090415 Re: Re: Some fun with tcp_wrappers
  • [oss-security] 20090415 Re: Some fun with tcp_wrappers
  • [oss-security] 20090415 Some fun with tcp_wrappers
  • [oss-security] 20090424 Re: Re: Some fun with tcp_wrappers
  • [oss-security] 20090428 Re: Re: Some fun with tcp_wrappers
Last major update 12-02-2023 - 06:15
Published 22-05-2009 - 11:53
Last modified 12-02-2023 - 06:15
Back to Top