CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2500

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.8%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2011-2500

Linux-Nfs » Nfs-Utils » Version: 0.1.1

cpe:2.3:a:linux-nfs:nfs-utils:0.1.1
Linux-Nfs » Nfs-Utils » Version: 0.1.2

cpe:2.3:a:linux-nfs:nfs-utils:0.1.2
Linux-Nfs » Nfs-Utils » Version: 0.1.3

cpe:2.3:a:linux-nfs:nfs-utils:0.1.3
Linux-Nfs » Nfs-Utils » Version: 0.1.4

cpe:2.3:a:linux-nfs:nfs-utils:0.1.4
Linux-Nfs » Nfs-Utils » Version: 0.1.5

cpe:2.3:a:linux-nfs:nfs-utils:0.1.5
Linux-Nfs » Nfs-Utils » Version: 0.1.6

cpe:2.3:a:linux-nfs:nfs-utils:0.1.6
Linux-Nfs » Nfs-Utils » Version: 0.1.7

cpe:2.3:a:linux-nfs:nfs-utils:0.1.7
Linux-Nfs » Nfs-Utils » Version: 0.1.8

cpe:2.3:a:linux-nfs:nfs-utils:0.1.8
Linux-Nfs » Nfs-Utils » Version: 0.1.8.2

cpe:2.3:a:linux-nfs:nfs-utils:0.1.8.2
Linux-Nfs » Nfs-Utils » Version: 0.1.9

cpe:2.3:a:linux-nfs:nfs-utils:0.1.9
Linux-Nfs » Nfs-Utils » Version: 0.1.9.1

cpe:2.3:a:linux-nfs:nfs-utils:0.1.9.1
Linux-Nfs » Nfs-Utils » Version: 0.2

cpe:2.3:a:linux-nfs:nfs-utils:0.2
Linux-Nfs » Nfs-Utils » Version: 0.2.1

cpe:2.3:a:linux-nfs:nfs-utils:0.2.1
Linux-Nfs » Nfs-Utils » Version: 0.3.1

cpe:2.3:a:linux-nfs:nfs-utils:0.3.1
Linux-Nfs » Nfs-Utils » Version: 0.3.3

cpe:2.3:a:linux-nfs:nfs-utils:0.3.3
Linux-Nfs » Nfs-Utils » Version: 1.0.1

cpe:2.3:a:linux-nfs:nfs-utils:1.0.1
Linux-Nfs » Nfs-Utils » Version: 1.0.10

cpe:2.3:a:linux-nfs:nfs-utils:1.0.10
Linux-Nfs » Nfs-Utils » Version: 1.0.11

cpe:2.3:a:linux-nfs:nfs-utils:1.0.11
Linux-Nfs » Nfs-Utils » Version: 1.0.12

cpe:2.3:a:linux-nfs:nfs-utils:1.0.12
Linux-Nfs » Nfs-Utils » Version: 1.0.3

cpe:2.3:a:linux-nfs:nfs-utils:1.0.3
Linux-Nfs » Nfs-Utils » Version: 1.0.4

cpe:2.3:a:linux-nfs:nfs-utils:1.0.4
Linux-Nfs » Nfs-Utils » Version: 1.0.5

cpe:2.3:a:linux-nfs:nfs-utils:1.0.5
Linux-Nfs » Nfs-Utils » Version: 1.0.6

cpe:2.3:a:linux-nfs:nfs-utils:1.0.6
Linux-Nfs » Nfs-Utils » Version: 1.0.7

cpe:2.3:a:linux-nfs:nfs-utils:1.0.7
Linux-Nfs » Nfs-Utils » Version: 1.0.7-pre1

cpe:2.3:a:linux-nfs:nfs-utils:1.0.7-pre1
Linux-Nfs » Nfs-Utils » Version: 1.0.7-pre2

cpe:2.3:a:linux-nfs:nfs-utils:1.0.7-pre2
Linux-Nfs » Nfs-Utils » Version: 1.0.8

cpe:2.3:a:linux-nfs:nfs-utils:1.0.8
Linux-Nfs » Nfs-Utils » Version: 1.0.8-rc1

cpe:2.3:a:linux-nfs:nfs-utils:1.0.8-rc1
Linux-Nfs » Nfs-Utils » Version: 1.0.8-rc2

cpe:2.3:a:linux-nfs:nfs-utils:1.0.8-rc2
Linux-Nfs » Nfs-Utils » Version: 1.0.8-rc3

cpe:2.3:a:linux-nfs:nfs-utils:1.0.8-rc3
Linux-Nfs » Nfs-Utils » Version: 1.0.8-rc4

cpe:2.3:a:linux-nfs:nfs-utils:1.0.8-rc4
Linux-Nfs » Nfs-Utils » Version: 1.0.9

cpe:2.3:a:linux-nfs:nfs-utils:1.0.9
Linux-Nfs » Nfs-Utils » Version: 1.1.0

cpe:2.3:a:linux-nfs:nfs-utils:1.1.0
Linux-Nfs » Nfs-Utils » Version: 1.1.0-rc1

cpe:2.3:a:linux-nfs:nfs-utils:1.1.0-rc1
Linux-Nfs » Nfs-Utils » Version: 1.1.1

cpe:2.3:a:linux-nfs:nfs-utils:1.1.1
Linux-Nfs » Nfs-Utils » Version: 1.1.2

cpe:2.3:a:linux-nfs:nfs-utils:1.1.2
Linux-Nfs » Nfs-Utils » Version: 1.1.3

cpe:2.3:a:linux-nfs:nfs-utils:1.1.3
Linux-Nfs » Nfs-Utils » Version: 1.1.4

cpe:2.3:a:linux-nfs:nfs-utils:1.1.4
Linux-Nfs » Nfs-Utils » Version: 1.1.5

cpe:2.3:a:linux-nfs:nfs-utils:1.1.5
Linux-Nfs » Nfs-Utils » Version: 1.1.6

cpe:2.3:a:linux-nfs:nfs-utils:1.1.6
Linux-Nfs » Nfs-Utils » Version: 1.2.0

cpe:2.3:a:linux-nfs:nfs-utils:1.2.0
Linux-Nfs » Nfs-Utils » Version: 1.2.1

cpe:2.3:a:linux-nfs:nfs-utils:1.2.1
Linux-Nfs » Nfs-Utils » Version: 1.2.2

cpe:2.3:a:linux-nfs:nfs-utils:1.2.2
Linux-Nfs » Nfs-Utils » Version: 1.2.3

cpe:2.3:a:linux-nfs:nfs-utils:1.2.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2500

Products

Pricing

Contact Us