CVE-1999-0554

CVE-1999-0554 concerns NFS exports that may disclose system-critical data to the world. The provided documents consistently describe exposure via NFS shares that can be mounted and read by an attacker, potentially reading (and in some sources possibly writing) sensitive files on the remote host. ...

CVE-1999-0631

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

PT-1999-1185 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A superfluous NFS server is running without importing or exporting any file systems. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-1999-1187 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The NFS exports system-critical data to the world, including sensitive directories like the root directory / or a password file. Recommendations: At the moment, there is no information...

PT-1998-1105 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The issue allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. Recommendations: At the moment, there is no...

PT-1997-1073 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS affected versions not specified Description: The issue allows attackers to read and write any file on the system by specifying a false UID. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-1997-1071 · Bsdi +2 · Bsd Os +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns NFS cache poisoning, which is a problem that affects the normal functioning of network file systems. No further details are provided about the nature of this issue, t...

PT-1997-1074 · Digital Equipment +1 · Osf +1

Name of the Vulnerable Software and Affected Versions: Ultrix affected versions not specified OSF affected versions not specified Description: Remote attackers can mount an NFS file system, even if it is denied on the access list. Recommendations: For Ultrix, restrict access to the NFS file syste...

PT-1997-1072 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS affected versions not specified Description: The issue allows users to access other directories beyond the exported file system by using a "cd .." command. Recommendations: At the moment, there is no information about a newer version that...

PT-1994-1004 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS affected versions not specified Description: The issue allows NFS directories to be mounted by anyone due to extra long export lists over 256 characters in some mount daemons. Recommendations: At the moment, there is no information about ...

PT-1992-1001 · Sun · Sunos

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The portmapper can act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host. This could potentially bypass authentication...

PT-1990-1000 · Nfs · Nfs

Name of the Vulnerable Software and Affected Versions: NFS servers affected versions not specified Description: The issue allows users to gain privileges by creating a writable kmem device and setting the UID to 0 using the mknod command. Recommendations: At the moment, there is no information...