CVE-2011-1749

Name of the Vulnerable Software and Affected Versions nfs-utils versions prior to 1.2.4

Description The issue allows local users to corrupt the /etc/mtab file via a process with a small RLIMIT FSIZE value. This occurs because the nfs addmntent function in the mount.nsf tool attempts to append to the /etc/mtab file without first checking whether resource limits would interfere.

Recommendations For versions prior to 1.2.4, update to version 1.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the mount.nsf tool to minimize the risk of exploitation. Avoid using the nfs addmntent function in the mount.nsf tool until the issue is resolved.