[LSD] IRIX nsd remote buffer overflow vulnerability

Hello, We have discovered a serious security vulnerability in the IRIX nsd service, which when properly exploited can result in an unauthorized remote root access to the vulnerable system. SGI was informed about this issue and assigned this bug number CVE CAN-2003-0575...

Linux Kernel 2.4.20 - 'decode_fh' Denial of Service

/ Linux 2.4.20 knfsd kernel signed/unsigned decodefh DoS Author: jared stanbrough Vulnerable code: fs/nfsd/nfs3xdr.c line 52-64 static inline u32 decodefhu32 p, struct svcfh fhp int size; fhinitfhp, NFS3FHSIZE; size = ntohlp++; if size NFS3FHSIZE return NULL; memcpy&fhp-fhhandle.fhbase, p, size;...

Linux Kernel <= 2.4.20 decode_fh Denial of Service Exploit

No description provided by source. / Linux 2.4.20 knfsd kernel signed/unsigned decodefh DoS Author: jared stanbrough jareds pdx edu Vulnerable code: fs/nfsd/nfs3xdr.c line 52-64 static inline u32 decodefhu32 p, struct svcfh fhp int size; fhinitfhp, NFS3FHSIZE; size = ntohlp++; if size NFS3FHSIZE...

Linux Kernel 2.4.20 - decode_fh Denial of Service

Linux Kernel 2.4.20 - decodefh Denial of Service / Linux 2.4.20 knfsd kernel signed/unsigned decodefh DoS Author: jared stanbrough Vulnerable code: fs/nfsd/nfs3xdr.c line 52-64 static inline u32 decodefhu32 p, struct svcfh fhp int size; fhinitfhp, NFS3FHSIZE; size = ntohlp++; if size NFS3FHSIZE...

Linux NFS utils package (nfs-utils) mountd xlog Function Off-by-one Remote Overflow

The remote rpc.mountd daemon is vulnerable to an off-by-one overflow which could be exploited by an attacker to gain a root shell on this host. C Tenable Network Security, Inc. This check is destructive by its very nature, as we need to check for a off-by-one overflow. Very few distributions are...

nfs-utils packages replaced

New nfs-utils packages are available for Slackware 8.1, 9.0, and -current to replace the ones that were issued yesterday. A bug in has been fixed in utils/mountd/auth.c that could cause mountd to crash. Here are the details from the Slackware 9.0 ChangeLog: Tue Jul 15 10:42:58 PDT 2003...

CVE-2003-0252

CVE-2003-0252 describes an off-by-one overflow in the xlog() function used by mountd in the Linux nfs-utils package (pre-1.0.4). Exploitation could allow remote attackers to cause a denial of service and potentially execute arbitrary code via certain RPC requests to mountd that do not contain new...

CVE-2003-0252

Off-by-one error in the xlog function of mountd in the Linux NFS utils package nfs-utils before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines...

CVE-2003-0252

Off-by-one error in the xlog function of mountd in the Linux NFS utils package nfs-utils before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines...

nfs-utils buffer overflow

Malformed RPC request causes off-by-one overflow...

Linux nfs-utils xlog() off-by-one bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Linux nfs-utils xlog off-by-one bug Product: nfs-utils Version: = 1.0.3 Vendor: http://sourceforge.net/projects/nfs/ URL: http://isec.pl/vulnerabilities/ CVE: CAN-2003-0252 Author: Janusz Niewiadomski [email protected] Date: July 14, 2003 Issu...

[SECURITY] [DSA-349-1] New nfs-utils package fixes buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 349-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 14th, 2003 http://www.debian.org/security/faq -...

nfs-utils off-by-one overflow fixed

New nfs-utils packages are available for Slackware 8.1, 9.0, and -current to fix an off-by-one buffer overflow in xlog.c. Thanks to Janusz Niewiadomski for discovering and reporting this problem. The CVE Common Vulnerabilities and Exposures Project has assigned the identification number...

Important: Red Hat Security Advisory: : : : Updated nfs-utils packages fix denial of service vulnerability

Updated nfs-utils packages are available that fix a remotely exploitable Denial of Service vulnerability. Updated 30 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The nfs-utils package provides a daemon for the kernel NFS server and related tools. Janusz...

Important: Red Hat Security Advisory: nfs-utils security update

Updated nfs-utils packages are available that fix a remotely exploitable Denial of Service vulnerability. The nfs-utils package provides a daemon for the kernel NFS server and related tools. Janusz Niewiadomski found a buffer overflow bug in nfs-utils version 1.0.3 and earlier. This bug could be...

DSA-349 nfs-utils - buffer overflow

Bulletin has no description...

CVE-2002-0830

Affected software: FreeBSD <= 4.6.1 RELEASE-p7 and NetBSD

CVE-2002-0830

Network File System NFS in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service hang via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an...

NFS portmapper localhost Mount Request Restricted Host Access

The remote RPC portmapper forwards NFS requests made to it. An attacker may use this flaw to make NFS mount requests which will appear to come from localhost and therefore override the ACLs set up for NFS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

NFS Predictable Filehandles Filesystem Access

The remote NFS server might allow an attacker to guess the NFS filehandles, and therefore allow them to mount the remote filesystems without the proper authorizations. C Tenable Network Security, Inc. This is a very old flaw include"compat.inc"; if description scriptid11353; scriptversion"1.18";...