Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-1923

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.

  • Published: Jan 21, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-1923
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.2
  • AV:A/AC:H/Au:N/C:P/I:P/A:N

CWEs:

Software From Fixed in
linux-nfs / nfs-utils 1.2.5 1.2.5.x
linux-nfs / nfs-utils - 1.2.7.x
linux-nfs / nfs-utils 1.2.6 1.2.6.x
linux-nfs / nfs-utils 1.2.2 1.2.2.x
linux-nfs / nfs-utils 1.2.3 1.2.3.x
linux-nfs / nfs-utils 1.2.1 1.2.1.x
linux-nfs / nfs-utils 1.2.4 1.2.4.x
linux-nfs / nfs-utils 1.2.0 1.2.0.x