EUVD-1999-0166

Malware in sbrugna...

kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence

A flaw was found in the Linux kernel's NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the...

CVE-1999-0166

The CVE-1999-0166 issue concerns NFS where a client can issue a "cd .." to escape the exported tree and access other directories beyond the intended NFS export. The connected sources describe it as an information-disclosure risk, potentially enabling an attacker to read files outside the exported...

PT-1991-1000 · Oracle · Sunos

Name of the Vulnerable Software and Affected Versions: SunOS affected versions not specified Description: The issue allows unauthorized access to the exported file system by guessing NFS file handles. Recommendations: At the moment, there is no information about a newer version that contains a fi...