Back to Database
Status published
Low
CVE-2013-1923
rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for...
Vulnerability Description
rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-1923
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/58854
- http://marc.info/?l=linux-nfs&m=136500502805121&w=2
- https://bugzilla.redhat.com/show_bug.cgi?id=948072
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00172.html
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00142.html
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00146.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85331
- http://marc.info/?l=linux-nfs&m=136491998607561&w=2
More from linux-nfs
View All →CVE-2011-2500
The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does...
High
7.5
CVE-2011-1749
The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in...
Low
3.3
CVE-2003-0252
Off-by-one error in the xlog function of mountd in the...
Critical
9.8
Affected Vendor
linux-nfs
View all reports →Affected Software
nfs-utils
Vulnerable Versions:
0, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6
Timeline
Official Publish:
January 21st, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.