Moderate: Red Hat Security Advisory: : Updated tcpdump packages fix buffer overflow

Updated tcpdump, libpcap, and arpwatch packages are available for Red Hat Linux 6.2 and 7.x. These updates close a buffer overflow when handling NFS packets. Update 3 October 2002 Replacement packages have been added for Red Hat Linux 6.2 as the previous packages could not be installed with the...

CVE-1999-1021

NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade...

CVE-1999-1382

CVE-1999-1382 describes a local privilege escalation in NetWare NFS mode 1 and 2. The issue arises when NetWare-NFS implements the Unix Read Only flag by changing a file’s ownership to root, which can be exploited by a local user who creates a setuid program and marks it as Read Only; NetWare-NFS...

CVE-1999-1382

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program...

CVE-2000-0575

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS...

CVE-2000-0575

SSH 1.2.27 with Kerberos authentication stores Kerberos tickets in a file created in the user’s current directory, which could allow an attacker to sniff the ticket cache if the home directory is on NFS. The issue is discussed in CVE-2000-0575 and related sources; a remediation is to upgrade to S...

CVE-1999-1021

CVE-1999-1021 affects SunOS 4.1–4.1.2 NFS: the high-order 16 bits of a 32-bit UID are ignored, enabling a local user to gain root if the lower 16 bits are 0. The issue is mitigated/fixed by the NFS jumbo patch upgrade. The connected sources confirm the affected OS and the patch-based fix; exploit...

CVE-2000-0575: Undefined Security Weakness

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS...

CVE-1999-1021: Undefined Security Weakness

NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade...

CVE-1999-1382: Undefined Security Weakness

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program...

CVE-2001-0505

The CVE-2001-0505 issue affects the Microsoft Services for UNIX (SFU) Telnet and NFS servers, where memory leaks can be triggered by a high volume of malformed requests, leading to denial of service via memory exhaustion. The affected components are the SFU Telnet server and SFU NFS server (on Wi...

CVE-2001-0505: Undefined Security Weakness

Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service memory exhaustion via a large number of malformed requests to 1 the Telnet service, or 2 the NFS service...

CVE-2001-0078

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-2001-0078

CVE-2001-0078 affects Sun Cluster 2.x via the component/feature named “in.mond.” The vulnerability arises from a symlink attack on the status file of a host running HA-NFS, allowing local users to read arbitrary files. Root cause: a symlink race condition in the status file handling. Impact: part...

CVE-2001-0078: Undefined Security Weakness

in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...

CVE-1999-1349

The CVE-1999-1349 entry affects the NFS daemon (nfsd.exe) for Omni-NFS/X 6.1. It describes a remote denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag, sent to port 111. The connected sources corroborate this impact but do not provide concrete remedia...

CVE-1999-1349

NFS daemon nfsd.exe for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service resource exhaustion via certain packets, possibly with the Urgent URG flag set, to port 111...

CVE-1999-1546

netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable...

CVE-1999-1564

FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service panic with a large number accesses of an NFS v3 mounted directory from a large number of processes...

CVE-1999-1564

The CVE-1999-1564 entry describes a local denial-of-service in FreeBSD 3.2 (and possibly other versions) triggered by a high volume of NFS v3 directory accesses across many processes, causing a kernel panic. The issue affects availability with a CVSS v2.0 base score of 2.1 (low) and is listed as ...