nfs-utils: Access restriction bypass

nfs-utils: Access restriction bypass An error in nfs-utils allows for bypass of the netgroups restriction. nfs-utils 2009-03-07 2009-03-07: 01 242696 remote 1.1.3 1.1.3

nfs-utils contains the client and daemon implementations for the NFS protocol.

Michele Marcionelli reported that nfs-utils invokes the hosts_ctl() function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups.

A remote attacker could bypass intended access restrictions, i.e. NFS netgroups, and gain access to restricted services.

There is no known workaround at this time.

All nfs-utils users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-fs/nfs-utils-1.1.3"

CVE-2008-4552 craig rbu rbu