Advisory Published
Updated

REDHAT-BUG-716949

First published: Mon Jun 27 2011(Updated: )

A security flaw was found in the way nfs-utils performed authentication of an incoming request, when an IP based authentication mechanism was used and certain file systems were exported to either to a netgroup or a wildcard (e.g. *.my.domain), and some file systems (either the same or different to the first set) were exported to specific hosts, IP addresses, or a subnet. A remote attacker, able to create global DNS entries could use this flaw to access above listed, exported file systems. References: [1] <a href="https://bugzilla.novell.com/show_bug.cgi?id=701702">https://bugzilla.novell.com/show_bug.cgi?id=701702</a> [2] <a href="http://www.openwall.com/lists/oss-security/2011/06/27/7">http://www.openwall.com/lists/oss-security/2011/06/27/7</a> (CVE Request) Relevant upstream patch: [3] <a href="http://marc.info/?l=linux-nfs&amp;m=130875695821953&amp;w=2">http://marc.info/?l=linux-nfs&amp;m=130875695821953&amp;w=2</a>

Affected SoftwareAffected VersionHow to fix
SUSE NFS-utils

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of REDHAT-BUG-716949?

    The severity of REDHAT-BUG-716949 is classified as high due to the potential for unauthorized access to exported file systems.

  • How do I fix REDHAT-BUG-716949?

    To fix REDHAT-BUG-716949, update nfs-utils to the latest version that addresses this vulnerability.

  • What systems are affected by REDHAT-BUG-716949?

    REDHAT-BUG-716949 affects systems using nfs-utils with IP-based authentication mechanisms and certain file systems exported to netgroups or wildcards.

  • What impact does REDHAT-BUG-716949 have on network file sharing?

    REDHAT-BUG-716949 can lead to potential unauthorized access or data exposure in network file sharing scenarios.

  • Is there a workaround for REDHAT-BUG-716949 until I can apply a patch?

    A possible workaround for REDHAT-BUG-716949 includes modifying export options to avoid using wildcard entries until a patch is applied.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203