5106 matches found
CVE-2000-0666
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges...
[SECURITY] New Debian nfs-common packages released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz July 15, 2000 - ---------------------------------------------------------------------------- Package: nfs-common from...
Kerberos security vulnerability in SSH-1.2.27
I am writing to report a security bug in SSH 1.2.27. SOFTWARE AFFECTED: SSH 1.2.27 with Kerberos authentication support compiled in i.e. "configure --with-kerberos5". I have contacted SSH Communicators Security http://www.ssh.com about this, and they have just released ssh-1.2.28, which fixes thi...
Remote DOS in linux rpc.lockd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, all... Found what appears to be a remote DOS in the linux kernel code for NFS lockd. Only requires a restart of the service, but the port stays bound in a iclosewait state for what appears to be an indefinite time. I have only tested this in...
Debian 2.12.2 Mandrake 6.06.17.0 RedHat 6.x - rpc.lockd Remote Denial of Service
Debian 2.12.2 Mandrake 6.06.17.0 RedHat 6.x - rpc.lockd Remote Denial of Service source: https://www.securityfocus.com/bid/1372/info A denial of service attack exists in the NFS lock daemon supplied with Linux. By connecting to the port rpc.lockd is running on, and supplying random input, it will...
Debian 2.1/2.2 / Mandrake 6.0/6.1/7.0 / RedHat 6.x - 'rpc.lockd' Remote Denial of Service
source: https://www.securityfocus.com/bid/1372/info A denial of service attack exists in the NFS lock daemon supplied with Linux. By connecting to the port rpc.lockd is running on, and supplying random input, it will cause lockd to exit with an error. The socket associated with rpc.lockd is also...
NFS Share Export List
This plugin retrieves the list of NFS exported shares. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid10437; scriptversion"1.36"; scriptcvsdate"Date: 2019/10/04 16:48:26"; scriptnameenglish:"NFS Share Export List"; scriptsummaryenglish:"Gets a list of exported NFS...
CVE-1999-0832
CVE-1999-0832 concerns a buffer overflow in the Linux NFS server triggered by a long pathname, allowing an attacker to execute commands. The linked records confirm the vulnerability exists in the NFS service on Linux and describe command execution as the impact. The provided documents do not spec...
CVE-1999-0832
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname...
CVE-2000-0344
The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value...
CVE-1999-0783
CVE-1999-0783 concerns FreeBSD: local users can cause a denial of service by creating a hard link from a device special file to a file on an NFS file system. The connected Red Hat advisory and CVE records repeat this description, with no product version or specific exploit details provided in the...
CVE-1999-0783
FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system...
CVE-1999-0169
This entry documents CVE-1999-0169 affecting NFS, where an attacker can read and write any file on the system by specifying a false UID. The vulnerability centers on the NFS service’s UID handling, enabling full confidentiality and integrity/availability impact per the provided metrics. Connected...
CVE-1999-0631
CVE-1999-0631 is rejected/not used per the initial description.
CVE-1999-0554
NFS exports system-critical data to the world, e.g. / or a password file...
CVE-1999-0548
CVE-1999-0548 describes a superfluous NFS server that is running but not importing or exporting any file systems. Across connected sources, there is no specific affected product/vendor/version detail; the issue is described as an unused NFS service increasing the attack surface. Remediation guida...
CVE-1999-0165
NFS cache poisoning...
CVE-1999-0169
NFS allows attackers to read and write any file on the system by specifying a false UID...
CVE-1999-0165
Technical details about CVE-1999-0165 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are specified. Monitor for updates from vendors and CVE sources.