CVE-2013-1923

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.2 UNKNOWN
ADJACENT_NETWORK
HIGH
AV:A/AC:H/Au:N/C:P/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
VendorProductVersion
linux-nfsnfs-utils
𝑥
≤ 1.2.7
linux-nfsnfs-utils
1.2.0
linux-nfsnfs-utils
1.2.1
linux-nfsnfs-utils
1.2.2
linux-nfsnfs-utils
1.2.3
linux-nfsnfs-utils
1.2.4
linux-nfsnfs-utils
1.2.5
linux-nfsnfs-utils
1.2.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nfs-utils
bullseye
1:1.3.4-6+deb11u1
fixed
squeeze
no-dsa
bookworm
1:2.6.2-4
fixed
sid
1:2.8.1-1
fixed
trixie
1:2.8.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nfs-utils
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
not-affected
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
not-affected
saucy
not-affected
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
lucid
ignored
hardy
ignored