CVE-2011-2500

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:linux-nfs:nfs-utils:*:*:*:*:*:*:*:*
cpe:2.3:a:linux-nfs:nfs-utils:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:linux-nfs:nfs-utils:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:linux-nfs:nfs-utils:1.2.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-02-15 14:57

Updated : 2024-02-04 18:35


NVD link : CVE-2011-2500

Mitre link : CVE-2011-2500

CVE.ORG link : CVE-2011-2500


JSON object : View

Products Affected

linux-nfs

  • nfs-utils
CWE
CWE-264

Permissions, Privileges, and Access Controls