Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.2
CVSSv2

CVE-2013-1923

Published: 21/01/2014 Updated: 29/08/2017
CVSS v2 Base Score: 3.2 | Impact Score: 4.9 | Exploitability Score: 3.2
VMScore: 285
Vector: AV:A/AC:H/Au:N/C:P/I:P/A:N
Subscribe to Linux-nfs

Vulnerability Summary

rpc-gssd in nfs-utils prior to 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote malicious users to read otherwise-restricted files via DNS spoofing attacks.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux-nfs nfs-utils 1.2.2

linux-nfs nfs-utils 1.2.1

linux-nfs nfs-utils

linux-nfs nfs-utils 1.2.6

linux-nfs nfs-utils 1.2.5

linux-nfs nfs-utils 1.2.4

linux-nfs nfs-utils 1.2.3

linux-nfs nfs-utils 1.2.0

Vendor Advisories

Debian CVElist Bug Report Logs: nfs-utils: CVE-2013-1923: rpc.gssd is vulnerable to DNS spoofing
Debian Bug report logs - #707401 nfs-utils: CVE-2013-1923: rpcgssd is vulnerable to DNS spoofing Package: nfs-utils; Maintainer for nfs-utils is Debian kernel team <debian-kernel@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 9 May 2013 08:16:12 UTC Severity: important Tags: sec ...
Red Hat: CVE-2013-1923
rpc-gssd in nfs-utils before 128 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks ...

References

CWE-200http://lists.opensuse.org/opensuse-updates/2013-06/msg00172.htmlhttp://marc.info/?l=linux-nfs&m=136500502805121&w=2https://bugzilla.redhat.com/show_bug.cgi?id=948072http://lists.opensuse.org/opensuse-updates/2013-06/msg00142.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00146.htmlhttp://marc.info/?l=linux-nfs&m=136491998607561&w=2http://www.securityfocus.com/bid/58854https://exchange.xforce.ibmcloud.com/vulnerabilities/85331https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707401https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2013-1923
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook