Package name
nfs-utils
Date
2009-03-19
Advisory ID
MDVSA-2009:060-1
Affected versions
CS4.0 x86_64 , CS4.0 i586

Problem description

A security vulnerability has been identified and fixed in nfs-utils,
which caused TCP Wrappers to ignore netgroups and allows remote
attackers to bypass intended access restrictions (CVE-2008-4552).

The updated packages have been patched to prevent this.

Update:

The Corporate Server 4 packages had the wrong release number (lower
than before) which prevented the update packages from being installed
automatically. This problem has now been solved with new packages
with the correct release number.

Updated packages

CS4.0 x86_64

 433180096c5ec6346b205d5892fc19e6  corporate/4.0/x86_64/nfs-utils-1.0.9-1.1.20060mlcs4.x86_64.rpm
 40c5eccc5e8d6aa4bdab94737df05f10  corporate/4.0/x86_64/nfs-utils-clients-1.0.9-1.1.20060mlcs4.x86_64.rpm 
 945c778a1301d0b403eca96100327328  corporate/4.0/SRPMS/nfs-utils-1.0.9-1.1.20060mlcs4.src.rpm

CS4.0 i586

 1bb92fc5f96eed86f9fbb3ae3261de37  corporate/4.0/i586/nfs-utils-1.0.9-1.1.20060mlcs4.i586.rpm
 226ce45a4dc354996b6868410ac05591  corporate/4.0/i586/nfs-utils-clients-1.0.9-1.1.20060mlcs4.i586.rpm 
 945c778a1301d0b403eca96100327328  corporate/4.0/SRPMS/nfs-utils-1.0.9-1.1.20060mlcs4.src.rpm

References