Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-687-1: nfs-utils vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-687-1: nfs-utils vulnerability
# 1  
Old 12-04-2008
USN-687-1: nfs-utils vulnerability
Referenced CVEs:
CVE-2008-4552


Description:
=========================================================== Ubuntu Security Notice USN-687-1 December 04, 2008 nfs-utils vulnerability CVE-2008-4552 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.10 Ubuntu 8.04 LTS Ubuntu 8.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: nfs-kernel-server 1:1.0.7-3ubuntu2.1 Ubuntu 7.10: nfs-kernel-server 1:1.1.1~git-20070709-3ubuntu1.1 Ubuntu 8.04 LTS: nfs-kernel-server 1:1.1.2-2ubuntu2.2 Ubuntu 8.10: nfs-kernel-server 1:1.1.2-4ubuntu1.1 After a standard system upgrade you need to restart nfs services to effect the necessary changes. Details follow: It was discovered that nfs-utils did not properly enforce netgroup restrictions when using TCP Wrappers. Remote attackers could bypass the netgroup restrictions enabled by the administrator and possibly gain access to sensitive information.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT CENTOS

tapset::nfs

tapset::nfs(3stap)														tapset::nfs(3stap)

NAME

       tapset::nfs - systemtap nfs tapset

DESCRIPTION

       nfs.fop.llseek
	      NFS client llseek operation

	       See probe::nfs.fop.llseek(3stap)
	       for details.

       nfs.fop.read
	      NFS client read operation

	       See probe::nfs.fop.read(3stap)
	       for details.

       nfs.fop.write
	      NFS client write operation

	       See probe::nfs.fop.write(3stap)
	       for details.

       nfs.fop.aio_read
	      NFS client aio_read file operation

	       See probe::nfs.fop.aio_read(3stap)
	       for details.

       nfs.fop.aio_write
	      NFS client aio_write file operation

	       See probe::nfs.fop.aio_write(3stap)
	       for details.

       nfs.fop.mmap
	      NFS client mmap operation

	       See probe::nfs.fop.mmap(3stap)
	       for details.

       nfs.fop.open
	      NFS client file open operation

	       See probe::nfs.fop.open(3stap)
	       for details.

       nfs.fop.flush
	      NFS client flush file operation

	       See probe::nfs.fop.flush(3stap)
	       for details.

       nfs.fop.release
	      NFS client release page operation

	       See probe::nfs.fop.release(3stap)
	       for details.

       nfs.fop.fsync
	      NFS client fsync operation

	       See probe::nfs.fop.fsync(3stap)
	       for details.

       nfs.fop.lock
	      NFS client file lock operation

	       See probe::nfs.fop.lock(3stap)
	       for details.

       nfs.fop.sendfile
	      NFS client send file operation

	       See probe::nfs.fop.sendfile(3stap)
	       for details.

       nfs.fop.check_flags
	      NFS client checking flag operation

	       See probe::nfs.fop.check_flags(3stap)
	       for details.

       nfs.aop.readpage
	      NFS client synchronously reading a page

	       See probe::nfs.aop.readpage(3stap)
	       for details.

       nfs.aop.readpages
	      NFS client reading multiple pages

	       See probe::nfs.aop.readpages(3stap)
	       for details.

       nfs.aop.set_page_dirty
	      NFS client marking page as dirty

	       See probe::nfs.aop.set_page_dirty(3stap)
	       for details.

       nfs.aop.writepage
	      NFS client writing a mapped page to the NFS server

	       See probe::nfs.aop.writepage(3stap)
	       for details.

       nfs.aop.writepages
	      NFS client writing several dirty pages to the NFS server

	       See probe::nfs.aop.writepages(3stap)
	       for details.

       nfs.aop.write_begin
	      NFS client begin to write data

	       See probe::nfs.aop.write_begin(3stap)
	       for details.

       nfs.aop.write_end
	      NFS client complete writing data

	       See probe::nfs.aop.write_end(3stap)
	       for details.

       nfs.aop.release_page
	      NFS client releasing page

	       See probe::nfs.aop.release_page(3stap)
	       for details.

SEE ALSO

	  probe::nfs.fop.llseek(3stap),      probe::nfs.fop.read(3stap),      probe::nfs.fop.write(3stap),	probe::nfs.fop.aio_read(3stap),
       probe::nfs.fop.aio_write(3stap),      probe::nfs.fop.mmap(3stap),       probe::nfs.fop.open(3stap),	  probe::nfs.fop.flush(3stap),
       probe::nfs.fop.release(3stap),	     probe::nfs.fop.fsync(3stap),      probe::nfs.fop.lock(3stap),	probe::nfs.fop.sendfile(3stap),
       probe::nfs.fop.check_flags(3stap),		 probe::nfs.aop.readpage(3stap),		 probe::nfs.aop.readpages(3stap),
       probe::nfs.aop.set_page_dirty(3stap),		    probe::nfs.aop.writepage(3stap),		  probe::nfs.aop.writepages(3stap),
       probe::nfs.aop.write_begin(3stap),  probe::nfs.aop.write_end(3stap),  probe::nfs.aop.release_page(3stap),  stap(1), stapprobes(3stap)

IBM
									---							tapset::nfs(3stap)