CVE-2014-1453

The NFS server nfsserver in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a vnode, which allows remote authenticated users to cause a denial of service deadlock via vectors involving a thread that uses the correct locking order...

CVE-2014-1453

CVE-2014-1453 affects FreeBSD 8.3–10.0 where the NFS server (nfsserver) may deadlock due to improper locking order when converting a directory file handle to a vnode. Remote authenticated users can trigger a denial of service via this locking-order issue. The connected Debian advisory notes this ...

CVE-2014-1453

Removed by vendor...

FreeBSD -- Deadlock in the NFS server

Problem Description: The kernel holds a lock over the source directory vnode while trying to convert the target directory file handle to a vnode, which needs to be returned with the lock held, too. This order may be in violation of normal lock order, which in conjunction with other threads that...

FreeBSD-SA-14:05.nfsserver

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:05.nfsserver Security Advisory The FreeBSD Project Topic: Deadlock in the NFS server Category: core Module: nfsserver Announced: 2014-04-08 Credits: Rick...

Scientific Linux Security Update : busybox on SL6.x i386/x86_64 (20131121)

It was found that the mdev BusyBox utility could create certain directories within /dev with world-writable permissions. A local unprivileged user could use this flaw to manipulate portions of the /dev directory tree. CVE-2013-1813 This update also fixes the following bugs : - Previously, due to ...

Low: Red Hat Security Advisory: busybox security and bug fix update

Updated busybox packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

[LinEnum] Scripted Local Linux Enumeration & Privilege Escalation Checks

High-level summary of the checks/tasks performed by LinEnum: Kernel and distribution release details System Information: Hostname Networking details: Current IP Default route details DNS server information User Information: Current user details Last logged on users List all users including uid/gi...

CVE-2013-4851

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...

CVE-2013-4851

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...

CVE-2013-4851

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...

CVE-2013-4851

CVE-2013-4851 affects the FreeBSD kernel NFS server: the vfs_hang_addrlist code in sys/kern/vfs_export.c may use client-supplied credentials instead of the exports(5) configured credentials when -network or -host restrictions apply, allowing a remote attacker to bypass file permissions on NFS fil...

FreeBSD -- Incorrect privilege validation in the NFS server

Problem Description: The kernel incorrectly uses client supplied credentials instead of the one configured in exports5 when filling out the anonymous credential for a NFS export, when -network or -host restrictions are used at the same time. Impact: The remote client may supply privileged...

CentOS 4 : nfs-utils (CESA-2009:0955)

An updated nfs-utils package that fixes a security issue and multiple bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and...

FreeBSD NFS server memory corruption

It's possible to call readdir on plain file...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

Memory corruption

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

CVE-2013-3266

The nfsrvdreaddir function in sys/fs/nfsserver/nfsnfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code ...

CVE-2013-3266

The CVE-2013-3266 issue affects the FreeBSD NFS server (nfsrvd_readdir in sys/fs/nfsserver/nfs_nfsdport.c) across FreeBSD 8.0–9.1-RELEASE-p3. Root cause: READDIR requests are not verified to be for a directory node, allowing a file to be interpreted as a directory. Impact: remote memory corruptio...