nfs-utils-1.0.9-42.1AXS3

エラータID: AXSA:2009-391:02

Release date: 
Tuesday, September 8, 2009 - 10:17
Subject: 
nfs-utils-1.0.9-42.1AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

The nfs-utils package provides a daemon for the kernel NFS server and related tools, which provides a much higher level of performance than the traditional Linux NFS server used by most users.
This package also contains the showmount program. Showmount queries the mount daemon on a remote host for information about the NFS (Network File System) server on the remote host. For example, showmount can display the clients which are mounted on that host.
This package also contains the mount.nfs and umount.nfs program.
Security bugs fixed by this release:
CVE-2008-4552
nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.

Solution: 

Update packages.

CVEs: 
CVE-2008-4552
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.


Additional Info: 

N/A

Download: 

SRPMS
  1. nfs-utils-1.0.9-42.1AXS3.src.rpm
    MD5: e1edeecf2e4504ea6dd9fd56ef7f83ac
    SHA-256: 444f160892a0c31f82f5d1412ffd3471aa14be75132e95b6e9e6aa6266c68e6f
    Size: 696.10 kB

Asianux Server 3 for x86
  1. nfs-utils-1.0.9-42.1AXS3.i386.rpm
    MD5: c1fc2e80334eb889ba7bb17010e44826
    SHA-256: fc0b348d43b818849bcc2d4dabbcf7f9de5cfbad42b89b3204ef7883311ecdbd
    Size: 390.02 kB

Asianux Server 3 for x86_64
  1. nfs-utils-1.0.9-42.1AXS3.x86_64.rpm
    MD5: 1c2c2fac35dfd1eace0adb3e24264562
    SHA-256: 9c6c0651714712b4b777b2d592772e9cacd81b610b025815a7fde119a8b759a3
    Size: 397.57 kB