FreeBSD_DoS.txt

Resending once, since it's been 10.5 days... Here's an interesting denial-of-service attack against FreeBSD =3.0 systems. It abuses a flaw in the new' FreeBSD vfscache.c; it has no way to purge entries unless the vnode' e.g. the file they point to is removed from memory -- which generally doesn't...

CVE-1999-1564

FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service panic with a large number accesses of an NFS v3 mounted directory from a large number of processes...

netstation.navio.comm-rte.txt

Date: Fri, 29 Jan 1999 21:43:51 PST From: Ryan McRonald To: [email protected] Subject: TROJAN: netstation.navio-comm.rte 1.1.0.1 While configuring some IBM Network Station 300s I noticed that my /tmp directory had become NFS exported and world read/writeable!! I traced this to one of the...

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying // source: https://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc call...

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying

// source: https://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc calls to other rpc services without being validated ...

CVE-1999-1546

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable...

CVE-1999-0554

NFS exports system-critical data to the world, e.g. / or a password file...

CVE-1999-0548

A superfluous NFS server is running, but it is not importing or exporting any file systems...

CVE-1999-0002

Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems...

[SECURITY] New versions of netstd fixes root exploit in rpc.mountd

Description ----------- The Program rpc.mountd is a mount daemon that handles NFS mounts. The version as shipped with current distributions of Linux contains a buffer overflow. Impact ------ The overflow can be used as part of an attack to gain root access on the machine acting NFS server. We...

RedHat Linux 5.1 Caldera OpenLinux Standard 1.2 - Mountd

RedHat Linux 5.1 Caldera OpenLinux Standard 1.2 - Mountd // source: https://www.securityfocus.com/bid/121/info NFS servers running certain implementations of mountd, primarily Linux systems. On some systems, the vulnerable NFS server is enabled by default. This vulnerability can be exploited even...

RedHat Linux 5.1 / Caldera OpenLinux Standard 1.2 - Mountd

// source: https://www.securityfocus.com/bid/121/info NFS servers running certain implementations of mountd, primarily Linux systems. On some systems, the vulnerable NFS server is enabled by default. This vulnerability can be exploited even if the NFS server does not share any file systems. This...

CVE-1999-0783

FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system...

FreeBSD-SA-98:05.nfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-98:05 Security Advisory FreeBSD, Inc. Topic: system crash with NFS Category: core Module: kernel Announced: 1998-06-04 Affects: FreeBSD 2.2. and FreeBSD-stable before...

IBM AIX 3.24.1 SCO Unixware 7.1.1 SGI IRIX 5.3 Sun Solaris 2.5.1 - Privilege Escalation

IBM AIX 3.24.1 SCO Unixware 7.1.1 SGI IRIX 5.3 Sun Solaris 2.5.1 - Privilege Escalation / source: https://www.securityfocus.com/bid/127/info Statd is the RPC NFS status daemon. It is used to communicate status information to other services or host. The version of statd shipped with many unix...

CVE-1999-0169

NFS allows attackers to read and write any file on the system by specifying a false UID...

CVE-1999-0165

NFS cache poisoning...

CVE-1999-0166

NFS allows users to use a "cd .." command to access other directories besides the exported file system...

CVE-1999-0170

Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list...

CVE-1999-0211

Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone...