-
Committer:
Bazaar Package Importer
-
Author(s):
Anibal Monsalve Salazar
-
Date:
2008-10-19 13:37:33 UTC
-
mfrom:
(1.2.14 upstream)
(12.1.13 hardy)
-
Revision ID:
james.westby@ubuntu.com-20081019133733-t5n9hivlzk3kgetz
Tags: 1:1.1.2-6lenny1
Fix CVE-2008-4552
nfs-utils 1.1.2, and possibly other versions before 1.1.3, invokes the
host_ctl function with the wrong order of arguments, which causes TCP
Wrappers to ignore netgroups and allows remote attackers to bypass
intended access restrictions.
Closes: #502680