← Vulnerability feed

Vulnerability record · CVE-2011-2500 · published 15 February 2014

CVE-2011-2500: Linux-nfs nfs-utils permissions and access controls vulnerability

LLinux Nfs · Nfs Utils

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.

7.5 CVSS 2.0 High EPSS 2.6% · top 15.5% CWE-264 · Permissions and access controls
7.5CVSS 2.0 base score
2.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=linux-nfs&m=130875695821953&w=2
http://rhn.redhat.com/errata/RHSA-2011-1534.html
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download
https://bugzilla.redhat.com/show_bug.cgi?id=716949
http://marc.info/?l=linux-nfs&m=130875695821953&w=2
http://rhn.redhat.com/errata/RHSA-2011-1534.html
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download
https://bugzilla.redhat.com/show_bug.cgi?id=716949

Track CVE-2011-2500 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-3689Linux-nfs nfs-utils incorrect default permissions vulnerabilityThe nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and…EPSS 1.5%9.8CVE-2003-0252Linux-nfs nfs-utils vulnerabilityOff-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of …EPSS 16%6.5CVE-2025-12801Redhat openshift container platform incorrect permission assignment vulnerabilityA vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privi…EPSS 0.46%3.3CVE-2011-1749Linux-nfs nfs-utils improper input validation vulnerabilityThe nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file witho…EPSS 0.35%3.2CVE-2013-1923Linux-nfs nfs-utils information exposure vulnerabilityrpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers …EPSS 1.0%5.1CVE-2015-3246libuser userhelper direct /etc/passwd write race conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used by the userhelper program in the usermode package, modifies /etc/passwd directly instead of …KEVEPSS 8.8%analysed6.6CVE-2015-1769Windows Mount Manager symlink mishandling allows local privilege escalationThe Windows Mount Manager mishandles symbolic links, allowing a crafted USB device to trigger arbitrary code execution. Because the flaw is in a core…KEVEPSS 4.1%analysed7.8CVE-2016-3643SolarWinds Virtualization Manager sudo misconfiguration privilege escalationSolarWinds Virtualization Manager 6.3.1 and earlier ship with a misconfigured sudo policy that lets a local user run privileged commands, as shown by…KEVEPSS 3.7%analysed

Source: NIST National Vulnerability Database (record CVE-2011-2500), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.