Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Gentoo: 202301-12 Critical: Samba File Sharing Security Flaw

gentoo
Calendar Grey March 7, 2009
Scroller Gentoo
A vulnerability in nfs-utils affects Gentoo installations. Users should upgrade to secure their systems.
An error in nfs-utils allows for bypass of the netgroups restriction.

Summary

Gentoo Linux Security Advisory GLSA 200903-06 https://security.gentoo.org/ Severity: Normal Title: nfs-utils: Access restriction bypass Date: March 07, 2009 Bugs: #242696 ID: 200903-06

Synopsis ======= An error in nfs-utils allows for bypass of the netgroups restriction.
Background ========= nfs-utils contains the client and daemon implementations for the NFS protocol.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-fs/nfs-utils < 1.1.3 >= 1.1.3
========== Michele Marcionelli reported that nfs-utils invokes the hosts_ctl() function with the wrong order of arguments, which causes TCP Wrappersto ignore netgroups.
Impact ===== A remote attacker could b...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo access control network services nfs-utils normal severity access restriction

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory gentoo access control network services nfs-utils normal severity access restriction

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround