Description
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nfs-utils | 1:1.1.3-1 | — |
| Debian 13 | nfs-utils | 1:1.1.3-1 | — |
| Debian 12 | nfs-utils | 1:1.1.3-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | nfs-utils | 1:1.0.9-42.el5 | RHSA-2009:1321 |
Advisories 1
- RHSA-2009:1321 Red Hat Security Advisory: nfs-utils security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 32481 third-party-advisory
- 32346 third-party-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0307
- oval:org.mitre.oval:def:8325 vdb-entry signature
- 38794 third-party-advisory
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates mailing-list
- nfsutils-hostctl-security-bypass(45895) vdb-entry
- RHSA-2009:1321 vendor-advisory
- [oss-security] 20120719 CVE Request: quota: incorrect use of tcp_wrappers mailing-list
- 33006 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=458676
- 36538 third-party-advisory
- [oss-security] 20120719 Re: CVE Request: quota: incorrect use of tcp_wrappers mailing-list
- MDVSA-2009:060 vendor-advisory
- oval:org.mitre.oval:def:11544 vdb-entry signature
- 20081030 rPSA-2008-0307-1 nfs-client nfs-server nfs-utils mailing-list
- USN-687-1 vendor-advisory
- 38833 third-party-advisory
- 31823 vdb-entry
- ADV-2010-0528 vdb-entry