NetSight
IP …
low3.2

CVE-2013-1923

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read ot…

Impact

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.

Affected products

VendorProductAffected versions
Linux-NfsNfs-Utils
through 1.2.7
Versions 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4

Weakness classification

CWE-200

References