6214 matches found
CVE-2004-1014
CVE-2004-1014 affects statd in nfs-utils 1.257 and earlier, where SIGPIPE is not ignored, allowing a remote attacker to trigger a denial-of-service (server crash) via a prematurely terminated TCP connection. The OpenVAS, Ubuntu USN-36-1, Debian DSA 606-1, Gentoo GLSA 200412-08, and Red Hat RHSA-2...
CVE-2004-1014
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...
DSA-606-1 nfs-utils - wrong signal handler
Bulletin has no description...
Debian DSA-606-1 : nfs-utils - wrong signal handler
SGI has discovered that rpc.statd from the nfs-utils package, the Network Status Monitor, did not ignore the 'SIGPIPE'. Hence, a client prematurely terminating the TCP connection could also terminate the server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
CVE-2004-1014: Undefined Security Weakness
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...
Mandrake Linux Security Advisory : nfs-utils (MDKSA-2004:146)
SGI developers discovered a remote DoS Denial of Service condition in the NFS statd server. rpc.statd did not ignore the 'SIGPIPE' signal which would cause it to shutdown if a misconfigured or malicious peer terminated the TCP connection prematurely. The updated packages have been patched to...
CVE-2004-0497
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4...
CVE-2004-0497
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4...
[Full-Disclosure] [USN-36-1] NFS statd vulnerability
=========================================================== Ubuntu Security Notice USN-36-1 December 01, 2004 nfs-utils vulnerability CAN-2004-1014 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog The...
USN-36-1: NFS statd vulnerability
SGI discovered a remote Denial of Service vulnerability in the NFS statd server. statd did not ignore the "SIGPIPE" signal which caused it to shutdown if a misconfigured or malicious peer terminated the TCP connection prematurely...
CVE-2004-0750
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the allsquash option from being applied...
Debian DSA-349-1 : nfs-utils - buffer overflow
The logging code in nfs-utils contains an off-by-one buffer overrun when adding a newline to the string being logged. This vulnerability may allow an attacker to execute arbitrary code or cause a denial of service condition by sending certain RPC requests. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2004-0750
The CVE-2004-0750 issue affects Red Hat’s redhat-config-nfs prior to version 1.0.13, where exporting shares to multiple hosts could yield incorrect permissions and prevent the all_squash option from applying. The root cause is a flaw in redhat-config-nfs that can mishandle permissions on exported...
CVE-2004-0750
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the allsquash option from being applied...
CVE-2004-0750: Undefined Security Weakness
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the allsquash option from being applied...
RHEL 3 : redhat-config-nfs (RHSA-2004:434)
An updated redhat-config-nfs package that fixes bugs and potential security issues is now available for Red Hat Enterprise Linux 3. The redhat-config-nfs package includes a graphical user interface for creating, modifying, and deleting nfs shares. John Buswell discovered a flaw in redhat-config-n...
Low: Red Hat Security Advisory: redhat-config-nfs security update
An updated redhat-config-nfs package that fixes bugs and potential security issues is now available for Red Hat Enterprise Linux 3. The redhat-config-nfs package includes a graphical user interface for creating, modifying, and deleting nfs shares. John Buswell discovered a flaw in redhat-config-n...
security flaw
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the allsquash option from being applied...
CVE-2002-0380
CVE-2002-0380 is a vulnerability in tcpdump up to version 3.6.2 where handling NFS packets can trigger a buffer overflow, potentially allowing denial of service or arbitrary code execution. Connected sources (Debian, Red Hat, OSV, NVD) reiterate the same issue and cite that updated packages/patch...