CVE-2009-0180 Security feature bypass in n/a

High 7.5 Published 20 Jan 2009 Updated 7 Aug 2024

Remote attackers can bypass intended access restrictions on NFS services due to missing TCP Wrapper support in Fedora build scripts.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2009-0180?

CVE-2009-0180 is a high-severity vulnerability in n/a, published on 20 Jan 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.

Weakness: CWE-264

Which versions are affected by CVE-2009-0180?

It affects 1 product.

Products include Nfs Nfs-Utils.

How do I fix CVE-2009-0180?

No fix has been published for CVE-2009-0180 yet. Limit exposure of the affected software until one is available.

Is CVE-2009-0180 being exploited?

There is no known exploitation of CVE-2009-0180 in the wild and no public exploit code.

Sources

Also known as GHSA-5j3f-hrhw-w856.