CVE-2012-3417 Security feature bypass in n/a
Remote attackers can bypass TCP Wrappers access controls in Linux DiskQuota by exploiting a flaw in the rquotad service's host name verification logic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3417?
CVE-2012-3417 is a medium-severity vulnerability in n/a, published on 13 Aug 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny.
Weakness: CWE-264
Which versions are affected by CVE-2012-3417?
It affects 1 product.
Linux distribution packages (4)
quota Red Hat:enterprise_linux:5::client | All versions | 1:3.13-8.el5 |
quota-debuginfo Red Hat:enterprise_linux:5::client | All versions | 1:3.13-8.el5 |
quota Red Hat:enterprise_linux:5::server | All versions | 1:3.13-8.el5 |
quota-debuginfo Red Hat:enterprise_linux:5::server | All versions | 1:3.13-8.el5 |
Products include Jan Kara Linux Diskquota.
How do I fix CVE-2012-3417?
Upgrade to a fixed version.
Is CVE-2012-3417 being exploited?
There is no known exploitation of CVE-2012-3417 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2012-3417, GHSA-4p8f-j9gj-x3p7, RHSA-2013:0120.