Please consider preapproving nfs-utils/1:1.1.2-6lenny1 to fix
CVE-2008-4552.
http://bugs.debian.org/502680
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4552
https://bugzilla.redhat.com/show_bug.cgi?id=458676
Changes:
nfs-utils (1:1.1.2-6lenny1) testing-proposed-updates; urgency=high
.
* Fix CVE-2008-4552
nfs-utils 1.1.2, and possibly other versions before 1.1.3, invokes the
host_ctl function with the wrong order of arguments, which causes TCP
Wrappers to ignore netgroups and allows remote attackers to bypass
intended access restrictions.
Closes: #502680
Attachment:
signature.asc
Description: Digital signature