CVE-2006-5780

Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to port 2049 nfsd, as demonstrated by vdxlink.pm...

FreeBSD 6.0 - nfsd Remote Kernel Panic (Denial of Service)

FreeBSD 6.0 - nfsd Remote Kernel Panic Denial of Service !/usr/bin/perl Saw an advisory on Dailydave and wrote a little script to check my freebsd boxes kind of evil. /str0ke milw0rm.com ProtoVer NFS testsuite 1.0 uncovered remote kernel panic vulnerability in FreeBSD 6.0 kernel. Evgeny Legerov...

[SA19017] FreeBSD "nfsd" NFS Mount Request Denial of Service

TITLE: FreeBSD "nfsd" NFS Mount Request Denial of Service SECUNIA ADVISORY ID: SA19017 VERIFY ADVISORY: http://secunia.com/advisories/19017/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ DESCRIPTION: Evgeny Legerov has...

CVE-2006-0900

nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite...

CVE-2006-0900

nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite...

CVE-2006-0900

CVE-2006-0900 affects FreeBSD where the NFS server (nfsd) processing of TCP RPC messages can panic the kernel when it receives a zero-length payload. The vulnerability allows a remote attacker to crash the system via a crafted NFS mount/RPC sequence, as demonstrated by historical advisories and P...

CVE-2006-0900: Undefined Security Weakness

nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite...

Solaris 7 (x86) : 109745-02

SunOS 5.7x86: nfsd and lockd Patch. Date this patch was last updated by Sun : Oct/07/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 7 (sparc) : 109744-02

SunOS 5.7: nfsd and lockd Patch. Date this patch was last updated by Sun : Sep/19/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (x86) : 109784-03

SunOS 5.8x86: /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd patch. Date this patch was last updated by Sun : Feb/14/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2003-0576

CVE-2003-0576 is a remote DoS in SGI IRIX 6.5.x via the NFS daemon (nfsd) stemming from XDR decoding errors that cause kernel panics. The SGI advisory (CAN-2003-0576) states IRIX 6.5.19f and earlier are affected and recommends upgrading to IRIX 6.5.20 or applying the listed patches. The connected...

CVE-2003-0576: Undefined Security Weakness

Unknown vulnerability in the NFS daemon nfsd in SGI IRIX 6.5.19f and earlier allows remote attackers to cause a denial of service kernel panic via certain packets that cause XDR decoding errors, a different vulnerability than CVE-2003-0619...

CVE-2003-0464

CVE-2003-0464 affects the Linux kernel (2.4) where a change in the RPC code sets the reuse flag for newly created sockets. This could allow a local attacker to bind UDP ports that are normally used by privileged services such as nfsd. The connected Red Hat advisory RHSA-2003:238 notes this issue ...

CVE-2003-0464: Undefined Security Weakness

The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd...

nfsd.linux.txt

Hi, this is voice of lam3rZ .pl -- Introduction - After reading lcamtuf's posts I decided write this one. Few months ago one of my friends - digit - found bug in linux nfsd daemon. I made example sploit about IV 1999. Now in distributions is new nfsd and nowhere was information about security...