Approved changes feed: RSS · Atom

cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*

part: a version: 1.0.1 update: *

VendorNfs (d7dc941c-d31d-595b-9448-dcadb458e185)
ProductNfs Utils (305f5666-4ede-52f8-9350-3dc68a5a7f3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/stefanha/nfs-utils purl2cpe 2026-06-01 10:17:37.374874
pkg:sourceforge/nfs purl2cpe 2026-06-01 10:17:37.374876

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0180 vulnerable 2026-06-08 04:51:08.091509 Details available
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.
Published: 2009-01-20T16:00:00.000Z
Updated: 2024-08-07T04:24:18.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4552 vulnerable 2026-06-08 04:50:39.276554 Details available
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
Published: 2008-10-14T19:00:00.000Z
Updated: 2024-08-07T10:17:09.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0946 vulnerable 2026-06-08 04:47:52.049899 Details available
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:31:48.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0154 vulnerable 2026-06-08 04:47:48.790480 Details available
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
Published: 2004-05-12T04:00:00.000Z
Updated: 2024-08-08T00:10:02.499Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.