Scientific Linux Security Update : nfs-utils on SL5.x i386/x86_64

high Nessus Plugin ID 60656
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote Scientific Linux host is missing one or more security updates.

Description

It was discovered that nfs-utils did not use tcp_wrappers correctly.
Certain hosts access rules defined in '/etc/hosts.allow' and '/etc/hosts.deny' may not have been honored, possibly allowing remote attackers to bypass intended access restrictions. (CVE-2008-4552)

This updated package also fixes the following bugs :

- the 'LOCKD_TCPPORT' and 'LOCKD_UDPPORT' options in '/etc/sysconfig/nfs' were not honored: the lockd daemon continued to use random ports. With this update, these options are honored. (BZ#434795)

- it was not possible to mount NFS file systems from a system that has the '/etc/' directory mounted on a read-only file system (this could occur on systems with an NFS-mounted root file system). With this update, it is possible to mount NFS file systems from a system that has '/etc/' mounted on a read-only file system.
(BZ#450646)

- arguments specified by 'STATDARG=' in '/etc/sysconfig/nfs' were removed by the nfslock init script, meaning the arguments specified were never passed to rpc.statd. With this update, the nfslock init script no longer removes these arguments. (BZ#459591)

- when mounting an NFS file system from a host not specified in the NFS server's '/etc/exports' file, a misleading 'unknown host' error was logged on the server (the hostname lookup did not fail). With this update, a clearer error message is provided for these situations.
(BZ#463578)

- the nhfsstone benchmark utility did not work with NFS version 3 and 4. This update adds support to nhfsstone for NFS version 3 and 4. The new nhfsstone '-2', '-3', and '-4' options are used to select an NFS version (similar to nfsstat(8)). (BZ#465933)

- the exportfs(8) manual page contained a spelling mistake, 'djando', in the EXAMPLES section. (BZ#474848)

- in some situations the NFS server incorrectly refused mounts to hosts that had a host alias in a NIS netgroup.
(BZ#478952)

- in some situations the NFS client used its cache, rather than using the latest version of a file or directory from a given export. This update adds a new mount option, 'lookupcache=', which allows the NFS client to control how it caches files and directories. Note: The Scientific Linux 2.6.18-164 or later kernel update must be installed in order to use the 'lookupcache=' option.
Also, 'lookupcache=' is currently only available for NFS version 3. Support for NFS version 4 may be introduced in future Scientific Linux 5 updates. (BZ#489335)

After installing this update, the nfs service will be restarted automatically.

Note: This update is already in SL 5.4

Solution

Update the affected nfs-utils, nfs-utils-lib and / or nfs-utils-lib-devel packages.

See Also

https://bugzilla.redhat.com/show_bug.cgi?id=434795

https://bugzilla.redhat.com/show_bug.cgi?id=450646

https://bugzilla.redhat.com/show_bug.cgi?id=459591

https://bugzilla.redhat.com/show_bug.cgi?id=463578

https://bugzilla.redhat.com/show_bug.cgi?id=465933

https://bugzilla.redhat.com/show_bug.cgi?id=474848

https://bugzilla.redhat.com/show_bug.cgi?id=478952

https://bugzilla.redhat.com/show_bug.cgi?id=489335

http://www.nessus.org/u?9dd13b24

Plugin Details

Severity: High

ID: 60656

File Name: sl_20090902_nfs_utils_on_SL5_x.nasl

Version: 1.6

Type: local

Agent: unix

Published: 8/1/2012

Updated: 1/14/2021

Dependencies: ssh_get_info.nasl

Risk Information

VPR

Risk Factor: Medium

Score: 5.2

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 9/2/2009

Vulnerability Publication Date: 10/14/2008

Reference Information

CVE: CVE-2008-4552

CWE: 264