CVE:CVE-2008-4552
CNNVD:CNNVD-200810-238
nfs-utils软件包可提供内核NFS服务器和相关工具的守护程序。
nfs-utils软件包的TCP封装程序实现用错误的参数序列调用了hosts_ctl()函数，远程攻击者可以绕过对NFS netgroup所实施的访问控制规则，获得对受限服务的访问。
solution:Upgrade nfs nfs-utils to a higher version than 1.1.2,0.2,0.2.1,0.3.1,0.3.3,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.6,1.0.7,1.0.7:pre-1,1.0.7:pre-2,1.0.8,1.0.8:rc-1,1.0.8:rc-2,1.0.8:rc-3,1.0.8:rc-4,1.0.9,1.0.10,1.0.11,1.0.12,1.1.0,1.1.0:rc-1,1.1.1,and avoid the version (,1.1.2],0.2,0.2.1,0.3.1,0.3.3,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.6,1.0.7,1.0.7:pre-1,1.0.7:pre-2,1.0.8,1.0.8:rc-1,1.0.8:rc-2,1.0.8:rc-3,1.0.8:rc-4,1.0.9,1.0.10,1.0.11,1.0.12,1.1.0,1.1.0:rc-1,1.1.1