CVE

Id
50412  
CVE No.
CVE-2011-2500  
Status
Candidate  
Description
The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544909 50412 CVE-2011-2500 MLIST:[linux-nfs] 20110622 [PATCH] nfs: fix host_reliable_addrinfo (try #2)  View
544910 50412 CVE-2011-2500 URL:http://marc.info/?l=linux-nfs&m=130875695821953&w=2  View
544911 50412 CVE-2011-2500 CONFIRM:http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/  View
544912 50412 CVE-2011-2500 CONFIRM:http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download  View
544913 50412 CVE-2011-2500 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=716949  View
544914 50412 CVE-2011-2500 REDHAT:RHSA-2011:1534  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34479 JVNDB-2011-004721 phpMyAdmin の libraries/auth/swekey/swekey.auth.lib.php における SESSION スーパーグローバル配列を変更される脆弱性 phpMyAdmin の Swekey 認証機能の libraries/auth/swekey/swekey.auth.lib.php には、SESSION スーパーグローバル配列を変更される脆弱性が存在します。 CVE-2011-2505 50412 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004721.html  View