CVE-2013-4851

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...

CVE-2013-4851

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...

CVE-2013-4851

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...

CVE-2013-4851

CVE-2013-4851 affects the FreeBSD kernel NFS server: the vfs_hang_addrlist code in sys/kern/vfs_export.c may use client-supplied credentials instead of the exports(5) configured credentials when -network or -host restrictions apply, allowing a remote attacker to bypass file permissions on NFS fil...

CVE-2013-4851: Undefined Security Weakness

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...

FreeBSD -- Incorrect privilege validation in the NFS server

Problem Description: The kernel incorrectly uses client supplied credentials instead of the one configured in exports5 when filling out the anonymous credential for a NFS export, when -network or -host restrictions are used at the same time. Impact: The remote client may supply privileged...

CentOS 4 : nfs-utils (CESA-2009:0955)

An updated nfs-utils package that fixes a security issue and multiple bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and...

FreeBSD NFS server memory corruption

It's possible to call readdir on plain file...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

Memory corruption

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

CVE-2013-3266

The CVE-2013-3266 issue affects the FreeBSD NFS server (nfsrvd_readdir in sys/fs/nfsserver/nfs_nfsdport.c) across FreeBSD 8.0–9.1-RELEASE-p3. Root cause: READDIR requests are not verified to be for a directory node, allowing a file to be interpreted as a directory. Impact: remote memory corruptio...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

FreeBSD -- NFS remote denial of service

Insufficient input validation in the NFS server allows an attacker to cause the underlying file system to treat a regular file as a directory...

Microsoft Windows NFS Server NULL Pointer Dereference (MS13-014; CVE-2013-1281)

A NULL pointer dereference vulnerability exists in Microsoft Windows' NFS server implementation. The vulnerability is due to incorrect handling of a non-permitted operation. A remote attacker could trigger this flaw by mounting an NFS share that is exported as read-only and then issue a RENAME...

Microsoft Windows Server NFS server DoS

NULL pointer dereference...

CVE-2013-1281

The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service NULL pointer dereference and reboot via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."...

Null pointer dereference

The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service NULL pointer dereference and reboot via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."...

CVE-2013-1281: Undefined Security Weakness

The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service NULL pointer dereference and reboot via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."...

Microsoft Windows NFS Server NULL Pointer Dereference Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability that affects its NFS server. Successful exploits will allow attackers to cause the affected computer to stop responding and reboot, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing...