OmniNFS NFS server buffer overflow

No description provided...

Omni-NFS Server nfsd.exe栈缓冲区溢出漏洞

Omni-NFS Server可以将Windows机器转换为NFS服务器，这样UNIX用户就可以访问从远程NFS客户端导入Windows资源。 Omni-NFS Server的nfsd.exe在处理接收到的数据时存在边界条件错误，允许攻击者通过发送特制的网络报文触发栈溢出，成功的攻击可能导致执行任意指令。 Xlink Technologies Omni-NFS Server 5.2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.xlink.com/nfsproducts/NFSServer/NFSServer.htm...

CVE-2006-5780

Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to port 2049 nfsd, as demonstrated by vdxlink.pm...

CVE-2006-5780

CVE-2006-5780 affects XLink Omni-NFS Server 5.2, where a stack-based overflow in nfsd.exe enables remote code execution via a crafted TCP packet to port 2049 (nfsd). The vd_xlink.pm proof and public exploit tooling are documented (e.g., Metasploit module xlink_nfsd.rb and Windows module). Affecte...

CVE-2006-5780

Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to port 2049 nfsd, as demonstrated by vdxlink.pm...

Omni-NFS Server 5.2 - 'nfsd.exe' Remote Stack Overflow (Metasploit)

vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of the following License. The Pack with all...

Debian DSA-975-1 : nfs-user-server - buffer overflow

Marcus Meissner discovered that attackers can trigger a buffer overflow in the path handling code by creating or abusing existing symlinks, which may lead to the execution of arbitrary code. This vulnerability isn't present in the kernel NFS server. This update includes a bugfix for attribute...

FreeBSD Security Advisory FreeBSD-SA-06:10.nfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:10.nfs Security Advisory The FreeBSD Project Topic: Remote denial of service in NFS server Category: core Module: sysnfsserver Announced: 2006-03-01 Credits:...

FreeBSD-SA-06:10.nfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:10.nfs Security Advisory The FreeBSD Project Topic: Remote denial of service in NFS server Category: core Module: sysnfsserver Announced: 2006-03-01 Credits:...

FreeBSD nfsd Malformed NFS Mount Request Remote DoS

The NFS server on the remote host appears to be one from FreeBSD that causes a kernel panic when it receives a malformed NFS mount request via TCP. An unauthenticated remote attacker can leverage this flaw to crash the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

nfs -- remote denial of service

Problem description: A part of the NFS server code charged with handling incoming RPC messages via TCP had an error which, when the server received a message with a zero-length payload, would cause a NULL pointer dereference which results in a kernel panic. The kernel will only process the RPC...

CVE-2006-0043

Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks...

Buffer overflow

Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks...

CVE-2006-0043

Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks...

CVE-2006-0043

Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks...

CVE-2006-0043

CVE-2006-0043 concerns a buffer overflow in the nfs-user-server path handling that Debian advisories (DSA-975-1) describe as remote and capable of arbitrary code execution via symlinks. Debian notes vulnerable packages in older releases (woody/sarge lineage) and provides fixes in the 2.2beta47- p...

SUSE-SA:2006:005: nfs-server

The remote host is missing the patch for the advisory SUSE-SA:2006:005 nfs-server. An remotely exploitable problem exists in the rpc.mountd service in the user space NFS server package 'nfs-server'. Insufficient buffer space supplied to the realpath function when processing mount requests can lea...

[Full-disclosure] SUSE Security Announcement: nfs-server/rpc.mountd remote code execution (SUSE-SA:2006:005)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: nfs-server Announcement ID: SUSE-SA:2006:005 Date: Thu, 26 Jan 2006 14:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 9.3 SUSE LINUX 9.2 SUSE LINUX 9.1 Vulnerability Type: remote code execution Severity...

Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-95-1)

A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...

USN-95-1: Linux kernel vulnerabilities

A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...