Test ID:	1.3.6.1.4.1.25623.1.0.122043
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2011-1534)
Summary:	The remote host is missing an update for the 'nfs-utils' package(s) announced via the ELSA-2011-1534 advisory.
Description:	Summary: The remote host is missing an update for the 'nfs-utils' package(s) announced via the ELSA-2011-1534 advisory. Vulnerability Insight: [1.2.3-15] - mout.nfs: Don't roll back to IPv4 when IPv6 fails (bz 744657) - rpcdebug: Added pNFS and FSCache debugging (bz 747400) [1.2.3-14] - mount.nfs: Backported how upstream handles the SIGXFSZ signal (bz 697981) [1.2.3-13] - mount.nfs: Reworked the code that deals with RLIMIT_FSIZE (bz 697981) [1.2.3-12] - Removed the stripping of debugging information from rpcdebug (bz 729001) [1.2.3-11] - mount.nfs: Fixed problem in mount error verbosity patch (bz 731693) [1.2.3-10] - mount.nfs: add error verbosity to invalid versions (bz 731693) [1.2.3-9] - umount.nfs: Got IPV6 unmounts working again (bz 732673) - mountd: return multiple hosts exporting the same directory (bz 726112) - mount: Better error message for invalid version (bz 723780) [1.2.3-8] - initscripts: just try to mount rpc_pipefs always (bz 692702) - Rely on crypto module autoloading in init scripts - svcgssd: Document '-n' for svcgssd (bz 697359) - mount.nfs: anticipate RLIMIT_FSIZE (bz 697981) - exportfs manpage: Ipv6 update (bz 715078) - mountd: Stop segfault in mtab code (bz 723438) - exportfs: wildcards in exports can lead to unintended mounts (bz 715391) - umount: allow spaces in unmount paths (bz 702273) - specfile: reordered how libgssglue is linked in (bz 720479) Affected Software/OS: 'nfs-utils' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1749 RHSA-2011:1534 http://rhn.redhat.com/errata/RHSA-2011-1534.html RHSA-2012:0310 http://rhn.redhat.com/errata/RHSA-2012-0310.html [oss-security] 20140425 Re: CVE request: CVE-2011-1089-like flaw in mount.nfs http://www.openwall.com/lists/oss-security/2011/04/25/5 http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download https://bugzilla.redhat.com/show_bug.cgi?id=697975 Common Vulnerability Exposure (CVE) ID: CVE-2011-2500 [linux-nfs] 20110622 [PATCH] nfs: fix host_reliable_addrinfo (try #2) http://marc.info/?l=linux-nfs&m=130875695821953&w=2 http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/ https://bugzilla.redhat.com/show_bug.cgi?id=716949
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.