CVE-1999-1021

CVE-1999-1021 affects SunOS 4.1–4.1.2 NFS: the high-order 16 bits of a 32-bit UID are ignored, enabling a local user to gain root if the lower 16 bits are 0. The issue is mitigated/fixed by the NFS jumbo patch upgrade. The connected sources confirm the affected OS and the patch-based fix; exploit...

CVE-1999-1382

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program...

CVE-2000-0575

SSH 1.2.27 with Kerberos authentication stores Kerberos tickets in a file created in the user’s current directory, which could allow an attacker to sniff the ticket cache if the home directory is on NFS. The issue is discussed in CVE-2000-0575 and related sources; a remediation is to upgrade to S...

CVE-2001-0505

The CVE-2001-0505 issue affects the Microsoft Services for UNIX (SFU) Telnet and NFS servers, where memory leaks can be triggered by a high volume of malformed requests, leading to denial of service via memory exhaustion. The affected components are the SFU Telnet server and SFU NFS server (on Wi...

CVE-2001-0078

CVE-2001-0078 affects Sun Cluster 2.x via the component/feature named “in.mond.” The vulnerability arises from a symlink attack on the status file of a host running HA-NFS, allowing local users to read arbitrary files. Root cause: a symlink race condition in the status file handling. Impact: part...

CVE-2001-0078

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-1999-1546

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable...

CVE-1999-1546

Technical details beyond the initial description are not provided in the connected documents. The CVE note states that /tmp is exported via NFS as world-readable/writable on Navio NC (AIX); no further public specifics are available here. Monitor for updates.

CVE-1999-1564

The CVE-1999-1564 entry describes a local denial-of-service in FreeBSD 3.2 (and possibly other versions) triggered by a high volume of NFS v3 directory accesses across many processes, causing a kernel panic. The issue affects availability with a CVSS v2.0 base score of 2.1 (low) and is listed as ...

CVE-1999-1564

FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service panic with a large number accesses of an NFS v3 mounted directory from a large number of processes...

CVE-1999-1349

NFS daemon nfsd.exe for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service resource exhaustion via certain packets, possibly with the Urgent URG flag set, to port 111...

CVE-1999-1349

The CVE-1999-1349 entry affects the NFS daemon (nfsd.exe) for Omni-NFS/X 6.1. It describes a remote denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag, sent to port 111. The connected sources corroborate this impact but do not provide concrete remedia...

Microsoft Services for UNIX Network File System (NFS) server is vulnerable to denial of service via memory leak

Overview The NFS server included in the Microsoft Services for Unix package contains a denial-of-service vulnerability that may cause the system to become unstable or crash. Description The Network File System NFS server included in the Microsoft Services for Unix SFU package contains a memory le...

CVE-2001-0078

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-2000-0666

CVE-2000-0666 affects the rpc.statd component of the nfs-utils package across various Linux distributions. The vulnerability arises from the rpc.statd daemon failing to cleanse untrusted format strings, with CERT/CC documenting that user-supplied data can be passed to syslog as a format string, e...

CVE-2000-0666

rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges...

CVE-2000-0344

The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value...

CVE-2000-0344

The CVE-2000-0344 entry affects the knfsd NFS server in Linux kernel 2.2.x. The vulnerability is a denial of service triggered by a negative size value, exploitable by remote attackers. The available sources confirm the affected component and the impact (denial of service) but do not provide expl...

statd bounce vulnerability

Overview statd allows access to RPC services it shouldn't. Description Background rpc.statd and rpc.lockd are designed to work in conjunction with each other to manage NFS lock information in the event of a crash of an NFS client or server. The rpc service rpc.statd is a program designed to...

Conectiva 4.x5.x Debian 2.x RedHat 6.x S.u.S.E 6.x7.0 Trustix 1.x - rpc.statd Remote Format String (3)

Conectiva 4.x5.x Debian 2.x RedHat 6.x S.u.S.E 6.x7.0 Trustix 1.x - rpc.statd Remote Format String 3 // source: https://www.securityfocus.com/bid/1480/info A vulnerability exists in the 'rpc.statd' program, which is part of the 'nfs-utils' package that is shipped with a number of popular Linux...