553 matches found
FreeBSD -- Deadlock in the NFS server
Problem Description: The kernel holds a lock over the source directory vnode while trying to convert the target directory file handle to a vnode, which needs to be returned with the lock held, too. This order may be in violation of normal lock order, which in conjunction with other threads that...
FreeBSD-SA-14:05.nfsserver
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:05.nfsserver Security Advisory The FreeBSD Project Topic: Deadlock in the NFS server Category: core Module: nfsserver Announced: 2014-04-08 Credits: Rick...
Scientific Linux Security Update : busybox on SL6.x i386/x86_64 (20131121)
It was found that the mdev BusyBox utility could create certain directories within /dev with world-writable permissions. A local unprivileged user could use this flaw to manipulate portions of the /dev directory tree. CVE-2013-1813 This update also fixes the following bugs : - Previously, due to ...
Low: Red Hat Security Advisory: busybox security and bug fix update
Updated busybox packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
[LinEnum] Scripted Local Linux Enumeration & Privilege Escalation Checks
High-level summary of the checks/tasks performed by LinEnum: Kernel and distribution release details System Information: Hostname Networking details: Current IP Default route details DNS server information User Information: Current user details Last logged on users List all users including uid/gi...
CVE-2013-4851
The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...
CVE-2013-4851
The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...
CVE-2013-4851
The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...
CVE-2013-4851
CVE-2013-4851 affects the FreeBSD kernel NFS server: the vfs_hang_addrlist code in sys/kern/vfs_export.c may use client-supplied credentials instead of the exports(5) configured credentials when -network or -host restrictions apply, allowing a remote attacker to bypass file permissions on NFS fil...
FreeBSD -- Incorrect privilege validation in the NFS server
Problem Description: The kernel incorrectly uses client supplied credentials instead of the one configured in exports5 when filling out the anonymous credential for a NFS export, when -network or -host restrictions are used at the same time. Impact: The remote client may supply privileged...
CentOS 4 : nfs-utils (CESA-2009:0955)
An updated nfs-utils package that fixes a security issue and multiple bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and...
FreeBSD NFS server memory corruption
It's possible to call readdir on plain file...
CVE-2013-3266
The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...
Memory corruption
The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...
CVE-2013-3266
The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...
CVE-2013-3266
The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...
CVE-2013-3266
The CVE-2013-3266 issue affects the FreeBSD NFS server (nfsrvd_readdir in sys/fs/nfsserver/nfs_nfsdport.c) across FreeBSD 8.0–9.1-RELEASE-p3. Root cause: READDIR requests are not verified to be for a directory node, allowing a file to be interpreted as a directory. Impact: remote memory corruptio...
FreeBSD -- NFS remote denial of service
Insufficient input validation in the NFS server allows an attacker to cause the underlying file system to treat a regular file as a directory...
Microsoft Windows NFS Server NULL Pointer Dereference (MS13-014; CVE-2013-1281)
A NULL pointer dereference vulnerability exists in Microsoft Windows' NFS server implementation. The vulnerability is due to incorrect handling of a non-permitted operation. A remote attacker could trigger this flaw by mounting an NFS share that is exported as read-only and then issue a RENAME...