CVE-2008-4552

The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which…

published October 14, 2008

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02295 · 83.1th percentile
Published
2008-10-14T19:00Z
EPSS history
Timeline
  • 14 OCT 19:00Z
    The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which…
    cvelistv5