security flaw

rquotad in nfs-utils rquotaserver.c before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request...

Hydra: PC-NFS

This plugin runs Hydra to find PC-NFS accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

security flaw

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2002-0830

Network File System NFS in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service hang via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an...

DEBIAN-CVE-2002-0380

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet...

Security Bulletin MS01-039

---------------------------------------------------------------------- Title: Services for Unix 2.0 Telnet and NFS Services Contain Memory Leaks Date: 23 July 2001 Software: Services for Unix 2.0 Impact: Denial of service Bulletin: MS01-039 Microsoft encourages customers to review the Security...

CVE-1999-0554

CVE-1999-0554 concerns NFS exports that may disclose system-critical data to the world. The provided documents consistently describe exposure via NFS shares that can be mounted and read by an attacker, potentially reading (and in some sources possibly writing) sensitive files on the remote host. ...

CVE-1999-0631

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

PT-1999-1185 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A superfluous NFS server is running without importing or exporting any file systems. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-1999-1187 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The NFS exports system-critical data to the world, including sensitive directories like the root directory / or a password file. Recommendations: At the moment, there is no information...

PT-1998-1105 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The issue allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. Recommendations: At the moment, there is no...

PT-1997-1073 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS affected versions not specified Description: The issue allows attackers to read and write any file on the system by specifying a false UID. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-1997-1071 · Bsdi +2 · Bsd Os +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns NFS cache poisoning, which is a problem that affects the normal functioning of network file systems. No further details are provided about the nature of this issue, t...

PT-1997-1072 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS affected versions not specified Description: The issue allows users to access other directories beyond the exported file system by using a "cd .." command. Recommendations: At the moment, there is no information about a newer version that...

PT-1997-1074 · Digital Equipment +1 · Osf +1

Name of the Vulnerable Software and Affected Versions: Ultrix affected versions not specified OSF affected versions not specified Description: Remote attackers can mount an NFS file system, even if it is denied on the access list. Recommendations: For Ultrix, restrict access to the NFS file syste...

PT-1994-1004 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS affected versions not specified Description: The issue allows NFS directories to be mounted by anyone due to extra long export lists over 256 characters in some mount daemons. Recommendations: At the moment, there is no information about ...

PT-1992-1001 · Sun · Sunos

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The portmapper can act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host. This could potentially bypass authentication...

PT-1990-1000 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS servers affected versions not specified Description: The issue allows users to gain privileges by creating a writable kmem device and setting the UID to 0 using the mknod command. Recommendations: At the moment, there is no information...