RHSA-2011:1534: Low: nfs-utils security, bug fix, and enhancement update
The nfs-utils packages provide a daemon for the kernel Network File System(NFS) server, and related tools such as the mount.nfs, umount.nfs, andshowmount programs.A flaw was found in the way nfs-utils performed IP based authentication ofmount requests. In configurations where a directory was exported to a groupof systems using a DNS wildcard or NIS (Network Information Service)netgroup, an attacker could possibly gain access to other directoriesexported to a specific host or subnet, bypassing intended accessrestrictions. (CVE-2011-2500)It was found that the mount.nfs tool did not handle certain errorscorrectly when updating the mtab (mounted file systems table) file. A localattacker could use this flaw to corrupt the mtab file. (CVE-2011-1749)This update also fixes several bugs and adds an enhancement. Documentationfor these bug fixes and the enhancement will be available shortly from theTechnical Notes document, linked to in the References section.Users of nfs-utils are advised to upgrade to these updated packages, whichcontain backported patches to resolve these issues and add thisenhancement. After installing this update, the nfs service will berestarted automatically.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2011:1534?
The severity of RHSA-2011:1534 is classified as important.
How do I fix RHSA-2011:1534?
To fix RHSA-2011:1534, update the nfs-utils package to version 1.2.3-15.el6.
What vulnerabilities does RHSA-2011:1534 address?
RHSA-2011:1534 addresses a flaw in IP-based authentication for mount requests in the nfs-utils package.
Which software is affected by RHSA-2011:1534?
The affected software includes nfs-utils and nfs-utils-debuginfo packages prior to version 1.2.3-15.el6.
Is there a workaround for the RHSA-2011:1534 vulnerability?
There is no identified workaround for the RHSA-2011:1534 vulnerability, making an update the recommended action.