CVE-2011-2500 | BDVDB-2026-59953 Detail

Description#

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugzilla.redhat.com/show_bug.cgi?id=716949
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download
http://marc.info/?l=linux-nfs&m=130875695821953&w=2
http://rhn.redhat.com/errata/RHSA-2011-1534.html
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/

Exploit#

No public exploit known

History#

Version 12014-02-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.