Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5.3 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel...

Null pointer dereference

The nfs4proclock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service NULL pointer dereference and panic by sending a certain response containing incorrect file attributes, which trigger attempted use of an...

CVE-2009-3726

The CVE-2009-3726 issue affects the Linux kernel NFSv4 client (fs/nfs/nfs4proc.c) and is triggered when a remote NFS server returns a crafted response with incorrect file attributes. This can cause a NULL pointer dereference and kernel panic by attempting to use an open file that has no NFSv4 sta...

CVE-2009-3726

The nfs4proclock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service NULL pointer dereference and panic by sending a certain response containing incorrect file attributes, which trigger attempted use of an...

Update Protection against Novell NetWare NFS Portmapper RPC Module Stack Overflow

A buffer overflow vulnerability exists in Novell NetWare NFS Portmapper daemon. Netware is a network operating system developed by Novell, providing file sharing and other services such as printing and email. The vulnerability is due to a boundary error when handling RPC calls. Unauthenticated...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

kernel: O_EXCL creates on NFSv4 are broken

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

kernel security and bug fix update

2.6.18-164.6.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1455 Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 23rd February 2010...

CentOS 4 : kernel (CESA-2009:1522)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

NFS Shares World Readable

The remote NFS server is exporting one or more shares without restricting access based on hostname, IP, or IP range. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid42256; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/02/21";...

NFS Server Superfluous

The remote NFS server is not exporting any shares. Running an unused service unnecessarily increases the attack surface of the remote host. C Tenable Network Security, Inc. Get the export list of the remote host and warns the user if a NFS share is exported to the world. include 'compat.inc' ;...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 21st July 2010 BZ523930 documentation expanded. The kernel...

SLES10: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VI...

SLES10: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

Omni-NFS Server FTP请求/响应处理栈溢出漏洞

BUGTRAQ ID: 36608 Omni-NFS Server可以将Windows机器转换为NFS服务器，这样UNIX用户就可以访问从远程NFS客户端导入Windows资源。 Omni-NFS服务器的ntpd.exe服务在处理发送给TCP 21端口的FTP请求以及wftp.exe服务在处理恶意FTP服务器所返回的响应时存在栈溢出漏洞。如果用户发送了恶意FTP请求或受骗连接到了恶意的 FTP服务器，就可能触发这些溢出，导致执行任意代码。 Xlink Omni-NFS Enterprise 5.2 厂商补丁： Xlink -----...

SLES9: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5040680 within the...

SLES9: Security update for nfs-utils

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: nfs-utils For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5040680 within the...

Omni-NFS Multiple Stack Buffer Overflow Vulnerabilities

Omni-NFS is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied network data before copying it into an insufficiently sized memory buffer. The issues affect both server and client. Exploiting these issues allows...

Omni-NFS Multiple Stack Buffer Overflow Vulnerabilities

Omni-NFS is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied network data before copying it into an insufficiently sized memory buffer. The issues affect both server and client. SPDX-FileCopyrightText: 2009 Greenbon...