CVE-2008-4552
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes...
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
Exploit likelihood
What each source reports
NVD Score used
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
- Record
CVE-2008-4552- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
- Record
CVE-2008-4552- Updated
- 2026-11-02
EUVDEUVD-2008-4533 No score
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
- Record
EUVD-2008-4533- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jg64-hjmp-ccvg No score
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes...
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
- Record
GHSA-jg64-hjmp-ccvg- Updated
- 2026-11-02
OSV No score
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
- Record
CVE-2008-4552- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-4552 No score
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
- Record
DEBIAN-CVE-2008-4552- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nfs-utilsDebian:12 |
before 1:1.1.3-1 | 1:1.1.3-1 |
nfs-utilsDebian:13 |
before 1:1.1.3-1 | 1:1.1.3-1 |
nfs-utilsDebian:14 |
before 1:1.1.3-1 | 1:1.1.3-1 |
nfs-utilsRed Hat:enterprise_linux:5::client |
before 1:1.0.9-42.el5 | 1:1.0.9-42.el5 |
nfs-utils-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.0.9-42.el5 | 1:1.0.9-42.el5 |
nfs-utilsRed Hat:enterprise_linux:5::server |
before 1:1.0.9-42.el5 | 1:1.0.9-42.el5 |
nfs-utils-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.0.9-42.el5 | 1:1.0.9-42.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4552 is a high vulnerability (CVSS 7.5) in Nfs Nfs-utils, published October 14, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in nfs-utils 1:1.1.3-1.
References
secunia.com/advisories/32481
wiki.rpath.com/Advisories:rPSA-2008-0307
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8325
lists.vmware.com/pipermail/security-announce/2010/000082.html
Show 29 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/45895
redhat.com/support/errata/RHSA-2009-1321.html
openwall.com/lists/oss-security/2012/07/19/2
bugzilla.redhat.com/show_bug.cgi?id=458676
mandriva.com/security/advisories?name=MDVSA-2009:060
securityfocus.com/archive/1/497935/100/0/threaded
ubuntu.com/usn/USN-687-1
vupen.com/english/advisories/2010/0528
nvd.nist.gov/vuln/detail/CVE-2008-4552
github.com/advisories/GHSA-jg64-hjmp-ccvg
security-tracker.debian.org/tracker/CVE-2008-4552
access.redhat.com/errata/RHSA-2009:1321
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1321.json
cve.org/CVERecord?id=CVE-2008-4552