Home > Vulnerability Database > CVE-2008-4552

Mend.io Vulnerability Database

CVE-2008-4552

Date: October 14, 2008

The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.

Severity Score

7.3

Related Resources (23)

Url: http://www.securityfocus.com/archive/1/497935/100/0/threaded

Url: http://secunia.com/advisories/36538

Url: http://secunia.com/advisories/32481

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/45895

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2009:060

Url: https://access.redhat.com/security/cve/CVE-2008-4552

Url: http://www.vupen.com/english/advisories/2010/0528

Url: http://secunia.com/advisories/38794

Url: http://secunia.com/advisories/32346

Url: http://secunia.com/advisories/33006

Url: http://secunia.com/advisories/38833

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325

Url: http://www.redhat.com/support/errata/RHSA-2009-1321.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=458676

Url: http://wiki.rpath.com/Advisories:rPSA-2008-0307

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-4552

Url: http://www.openwall.com/lists/oss-security/2012/07/19/2

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11544

Url: http://www.openwall.com/lists/oss-security/2012/07/19/5

Url: http://www.ubuntu.com/usn/USN-687-1

Url: http://www.securityfocus.com/bid/31823

Url: http://lists.vmware.com/pipermail/security-announce/2010/000082.html

Url: https://www.mend.io/vulnerability-database/CVE-2008-4552

Severity Score

7.3

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2008-4552

Date: October 14, 2008

Severity Score

Related Resources (23)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?