Security Advisory

CVE-2011-2500

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-02-15 11:00:00
Last updated 2024-08-06 23:00:34
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.