PT-2012-4698 · Linux+2 · Linux Diskquota+2

Tomas Hoger · Published 2012-08-13 · Updated 2023-02-13 · CVE-2012-3417

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux DiskQuota (aka quota) versions prior to 3.17

Description The issue concerns the good client function in rquotad, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny. This occurs because the hosts ctl function is invoked without a host name.

Recommendations For versions prior to 3.17, update to version 3.17 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-3417

RHSA-2013:0120

RHSA-2013_0120

SUSE-SU-2012_1071-1

SUSE-SU-2012_1071-2

Affected Products

Linux Diskquota

Red Hat

Suse

References · 25

• 🔥 http://linuxquota.git.sourceforge.net/git/gitweb.cgi?p=linuxquota/linuxquota;a=commitdiff;h=0abbfe92536fa5854eb65572de0cf131f80e2387 · Exploit
• https://hermes.opensuse.org/messages/15509723 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0120.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3417 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3417 · Security Note
• https://osv.dev/vulnerability/CVE-2012-3417 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3417 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-3417 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2013:0120 · Note
• http://download.novell.com/patch/finder/?keywords=5b1b1ff021c6fa5bf81afe1f443cbf23 · Note
• http://openwall.com/lists/oss-security/2012/07/19/2 · Note
• http://download.novell.com/patch/finder/?keywords=0a46fef03534da311570e6b60db7e6c2 · Note
• http://openwall.com/lists/oss-security/2012/07/19/5 · Note
• https://bugzilla.novell.com/772570 · Note
• https://access.redhat.com/security/cve/CVE-2012-3417 · Note