5525 matches found
nfs-utils: Multiple remote vulnerabilities
Background nfs-utils is a package containing the client and daemon implementations for the NFS protocol. Description Arjan van de Ven has discovered a buffer overflow on 64-bit architectures in 'rquotaserver.c' of nfs-utils CAN-2004-0946. A remotely exploitable flaw on all architectures also exis...
GLSA-200412-08 : nfs-utils: Multiple remote vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200412-08 nfs-utils: Multiple remote vulnerabilities Arjan van de Ven has discovered a buffer overflow on 64-bit architectures in 'rquotaserver.c' of nfs-utils CAN-2004-0946. A remotely exploitable flaw on all architectures also...
[SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 606-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 606-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2004 http://www.debian.org/security/faq -...
CVE-2004-1014
CVE-2004-1014 affects statd in nfs-utils 1.257 and earlier, where SIGPIPE is not ignored, allowing a remote attacker to trigger a denial-of-service (server crash) via a prematurely terminated TCP connection. The OpenVAS, Ubuntu USN-36-1, Debian DSA 606-1, Gentoo GLSA 200412-08, and Red Hat RHSA-2...
CVE-2004-1014
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...
CVE-2004-1014
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...
Debian DSA-606-1 : nfs-utils - wrong signal handler
SGI has discovered that rpc.statd from the nfs-utils package, the Network Status Monitor, did not ignore the 'SIGPIPE'. Hence, a client prematurely terminating the TCP connection could also terminate the server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
DSA-606-1 nfs-utils - wrong signal handler
Bulletin has no description...
Mandrake Linux Security Advisory : nfs-utils (MDKSA-2004:146)
SGI developers discovered a remote DoS Denial of Service condition in the NFS statd server. rpc.statd did not ignore the 'SIGPIPE' signal which would cause it to shutdown if a misconfigured or malicious peer terminated the TCP connection prematurely. The updated packages have been patched to...
CVE-2004-0497
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4...
CVE-2004-0497
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4...
[Full-Disclosure] [USN-36-1] NFS statd vulnerability
=========================================================== Ubuntu Security Notice USN-36-1 December 01, 2004 nfs-utils vulnerability CAN-2004-1014 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog The...
USN-36-1: NFS statd vulnerability
SGI discovered a remote Denial of Service vulnerability in the NFS statd server. statd did not ignore the "SIGPIPE" signal which caused it to shutdown if a misconfigured or malicious peer terminated the TCP connection prematurely...
CVE-2004-0750
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the allsquash option from being applied...
Debian DSA-349-1 : nfs-utils - buffer overflow
The logging code in nfs-utils contains an off-by-one buffer overrun when adding a newline to the string being logged. This vulnerability may allow an attacker to execute arbitrary code or cause a denial of service condition by sending certain RPC requests. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2004-0750
The CVE-2004-0750 issue affects Red Hat’s redhat-config-nfs prior to version 1.0.13, where exporting shares to multiple hosts could yield incorrect permissions and prevent the all_squash option from applying. The root cause is a flaw in redhat-config-nfs that can mishandle permissions on exported...
CVE-2004-0750
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the allsquash option from being applied...
RHEL 3 : redhat-config-nfs (RHSA-2004:434)
An updated redhat-config-nfs package that fixes bugs and potential security issues is now available for Red Hat Enterprise Linux 3. The redhat-config-nfs package includes a graphical user interface for creating, modifying, and deleting nfs shares. John Buswell discovered a flaw in redhat-config-n...
Low: Red Hat Security Advisory: redhat-config-nfs security update
An updated redhat-config-nfs package that fixes bugs and potential security issues is now available for Red Hat Enterprise Linux 3. The redhat-config-nfs package includes a graphical user interface for creating, modifying, and deleting nfs shares. John Buswell discovered a flaw in redhat-config-n...