Gentoo Linux Security Advisory GLSA 200903-06
https://security.gentoo.org/
Severity: Normal
Title: nfs-utils: Access restriction bypass
Date: March 07, 2009
Bugs: #242696
ID: 200903-06
Synopsis
=======
An error in nfs-utils allows for bypass of the netgroups restriction.
Background
=========
nfs-utils contains the client and daemon implementations for the NFS
protocol.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-fs/nfs-utils < 1.1.3 >= 1.1.3
==========
Michele Marcionelli reported that nfs-utils invokes the hosts_ctl()
function with the wrong order of arguments, which causes TCP Wrappersto ignore netgroups.
Impact
=====
A remote attacker could b...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.