← Vulnerability feed

Vulnerability record · CVE-2011-1749 · published 26 February 2014

CVE-2011-1749: Linux-nfs nfs-utils improper input validation vulnerability

LLinux Nfs · Nfs Utils

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

3.3 CVSS 2.0 Low EPSS 0.35% · top 74.1% CWE-20 · Improper input validation
3.3CVSS 2.0 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

AV:L/AC:M/Au:N/C:N/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://rhn.redhat.com/errata/RHSA-2011-1534.html
http://rhn.redhat.com/errata/RHSA-2012-0310.html Patch
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download Patch
http://www.openwall.com/lists/oss-security/2011/04/25/5
https://bugzilla.redhat.com/show_bug.cgi?id=697975
http://rhn.redhat.com/errata/RHSA-2011-1534.html
http://rhn.redhat.com/errata/RHSA-2012-0310.html Patch
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download Patch
http://www.openwall.com/lists/oss-security/2011/04/25/5
https://bugzilla.redhat.com/show_bug.cgi?id=697975

Track CVE-2011-1749 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-3689Linux-nfs nfs-utils incorrect default permissions vulnerabilityThe nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and…EPSS 1.5%9.8CVE-2003-0252Linux-nfs nfs-utils vulnerabilityOff-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of …EPSS 16%7.5CVE-2011-2500Linux-nfs nfs-utils permissions and access controls vulnerabilityThe host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports,…EPSS 2.6%6.5CVE-2025-12801Redhat openshift container platform incorrect permission assignment vulnerabilityA vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privi…EPSS 0.46%3.2CVE-2013-1923Linux-nfs nfs-utils information exposure vulnerabilityrpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers …EPSS 1.0%9.5CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEV9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 1.1%8.8CVE-2019-1068Microsoft SQL Server improper input validation remote code executionMicrosoft SQL Server mishandles processing of internal functions, allowing an authenticated remote attacker to execute code on the database server. T…KEVEPSS 58%analysed

Source: NIST National Vulnerability Database (record CVE-2011-1749), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.