CVE-2009-0180

Description

Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.

Affected products

• nfs / nfs-utils1.1.2
• nfs / nfs-utils0.2 – 0.2
• nfs / nfs-utils0.2.1 – 0.2.1
• nfs / nfs-utils0.3.1 – 0.3.1
• nfs / nfs-utils0.3.3 – 0.3.3
• nfs / nfs-utils1.0 – 1.0
• nfs / nfs-utils1.0.1 – 1.0.1
• nfs / nfs-utils1.0.2 – 1.0.2
• nfs / nfs-utils1.0.3 – 1.0.3
• nfs / nfs-utils1.0.4 – 1.0.4
• nfs / nfs-utils1.0.6 – 1.0.6
• nfs / nfs-utils1.0.7 – 1.0.7
• nfs / nfs-utils1.0.7 – 1.0.7
• nfs / nfs-utils1.0.7 – 1.0.7
• nfs / nfs-utils1.0.8 – 1.0.8
• nfs / nfs-utils1.0.8 – 1.0.8
• nfs / nfs-utils1.0.8 – 1.0.8
• nfs / nfs-utils1.0.8 – 1.0.8
• nfs / nfs-utils1.0.8 – 1.0.8
• nfs / nfs-utils1.0.9 – 1.0.9
• nfs / nfs-utils1.0.10 – 1.0.10
• nfs / nfs-utils1.0.11 – 1.0.11
• nfs / nfs-utils1.0.12 – 1.0.12
• nfs / nfs-utils1.1.0 – 1.1.0
• nfs / nfs-utils1.1.0 – 1.1.0
• nfs / nfs-utils1.1.1 – 1.1.1
• nfs / nfs-utils1.1.2 – 1.1.2
• nfs / nfs-utils1.1.3 – 1.1.3

References

• MISChttps://bugzilla.redhat.com/show_bug.cgi?id=477864
• MISChttp://www.securityfocus.com/bid/33294
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/48058
• MISChttps://www.redhat.com/archives/fedora-package-announce/2009-January/msg00526.html
• MISChttps://www.redhat.com/archives/fedora-package-announce/2009-January/msg00376.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/33545