NFS-SERVER Remote Buffer Overflow Vulnerability
BID:16388
Info
NFS-SERVER Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 16388 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2006-0043 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2006 12:00AM |
| Updated: | Dec 13 2006 08:33PM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 nfs nfs-server 2.2.beta51 nfs nfs-server 2.2.beta47 nfs nfs-server 2.2.beta46 nfs nfs-server 2.2.beta37 nfs nfs-server 2.2.beta29 |
| Not Vulnerable: | |
Discussion
NFS-SERVER Remote Buffer Overflow Vulnerability
The 'nfs-server' package is prone to a remote buffer-overflow vulnerability.
A remote attacker with the ability to create symlinks on any of the filesystems on an affected computer running 'rpc.mountd' can exploit this issue to execute arbitrary code. Attackers without filesystem access may also be able to execute arbitrary code, but this has not been confirmed.
Note that the 'nfs-server' package is obsolete. The 'nfs-utils' package is not affected by this issue.
The 'nfs-server' package is prone to a remote buffer-overflow vulnerability.
A remote attacker with the ability to create symlinks on any of the filesystems on an affected computer running 'rpc.mountd' can exploit this issue to execute arbitrary code. Attackers without filesystem access may also be able to execute arbitrary code, but this has not been confirmed.
Note that the 'nfs-server' package is obsolete. The 'nfs-utils' package is not affected by this issue.
Exploit / POC
NFS-SERVER Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
NFS-SERVER Remote Buffer Overflow Vulnerability
Solution:
Please see the referenced advisories for more information and fixes.
nfs nfs-server 2.2.beta51
nfs nfs-server 2.2.beta47
Solution:
Please see the referenced advisories for more information and fixes.
nfs nfs-server 2.2.beta51
-
SuSE nfs-server-2.2beta51-206.4.i586.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/nfs-server-2.2bet a51-206.4.i586.rpm -
SuSE nfs-server-2.2beta51-206.4.x86_64.rpm
SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/nfs-server-2. 2beta51-206.4.x86_64.rpm -
SuSE nfs-server-2.2beta51-208.2.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/nfs-server-2.2bet a51-208.2.i586.rpm -
SuSE nfs-server-2.2beta51-208.2.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/nfs-server-2.2b eta51-208.2.x86_64.rpm -
SuSE nfs-server-2.2beta51-209.2.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/nfs-server-2.2bet a51-209.2.i586.rpm -
SuSE nfs-server-2.2beta51-209.2.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/nfs-server-2.2b eta51-209.2.x86_64.rpm -
SuSE nfs-server-2.2beta51-212.2.i586.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/nfs-server-2.2be ta51-212.2.i586.rpm -
SuSE nfs-server-2.2beta51-212.2.ppc.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/nfs-server-2.2bet a51-212.2.ppc.rpm -
SuSE nfs-server-2.2beta51-212.2.x86_64.rpm
SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/nfs-server-2.2 beta51-212.2.x86_64.rpm
nfs nfs-server 2.2.beta47
-
Debian nfs-user-server_2.2beta47-12woody1_alpha.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_alpha.deb -
Debian nfs-user-server_2.2beta47-12woody1_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_arm.deb -
Debian nfs-user-server_2.2beta47-12woody1_hppa.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_hppa.deb -
Debian nfs-user-server_2.2beta47-12woody1_i386.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_i386.deb -
Debian nfs-user-server_2.2beta47-12woody1_ia64.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_ia64.deb -
Debian nfs-user-server_2.2beta47-12woody1_m68k.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_m68k.deb -
Debian nfs-user-server_2.2beta47-12woody1_mips.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_mips.deb -
Debian nfs-user-server_2.2beta47-12woody1_mipsel.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_mipsel.deb -
Debian nfs-user-server_2.2beta47-12woody1_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_powerpc.deb -
Debian nfs-user-server_2.2beta47-12woody1_s390.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_s390.deb -
Debian nfs-user-server_2.2beta47-12woody1_sparc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_sparc.deb -
Debian nfs-user-server_2.2beta47-20sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_alpha.deb -
Debian nfs-user-server_2.2beta47-20sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_amd64.deb -
Debian nfs-user-server_2.2beta47-20sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_arm.deb -
Debian nfs-user-server_2.2beta47-20sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_hppa.deb -
Debian nfs-user-server_2.2beta47-20sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_i386.deb -
Debian nfs-user-server_2.2beta47-20sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_ia64.deb -
Debian nfs-user-server_2.2beta47-20sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_m68k.deb -
Debian nfs-user-server_2.2beta47-20sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_mips.deb -
Debian nfs-user-server_2.2beta47-20sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_mipsel.deb -
Debian nfs-user-server_2.2beta47-20sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_powerpc.deb -
Debian nfs-user-server_2.2beta47-20sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_s390.deb -
Debian nfs-user-server_2.2beta47-20sarge2_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_sparc.deb -
Debian ugidd_2.2beta47-12woody1_alpha.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_alpha.deb -
Debian ugidd_2.2beta47-12woody1_arm.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_arm.deb -
Debian ugidd_2.2beta47-12woody1_hppa.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_hppa.deb -
Debian ugidd_2.2beta47-12woody1_i386.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_i386.deb -
Debian ugidd_2.2beta47-12woody1_ia64.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_ia64.deb -
Debian ugidd_2.2beta47-12woody1_m68k.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_m68k.deb -
Debian ugidd_2.2beta47-12woody1_mips.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_mips.deb -
Debian ugidd_2.2beta47-12woody1_mipsel.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_mipsel.deb -
Debian ugidd_2.2beta47-12woody1_powerpc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_powerpc.deb -
Debian ugidd_2.2beta47-12woody1_s390.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_s390.deb -
Debian ugidd_2.2beta47-12woody1_sparc.deb
Debian GNU/Linux 3.0 alias woody
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_sparc.deb -
Debian ugidd_2.2beta47-20sarge2_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_alpha.deb -
Debian ugidd_2.2beta47-20sarge2_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_amd64.deb -
Debian ugidd_2.2beta47-20sarge2_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_arm.deb -
Debian ugidd_2.2beta47-20sarge2_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_hppa.deb -
Debian ugidd_2.2beta47-20sarge2_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_i386.deb -
Debian ugidd_2.2beta47-20sarge2_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_ia64.deb -
Debian ugidd_2.2beta47-20sarge2_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_m68k.deb -
Debian ugidd_2.2beta47-20sarge2_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_mips.deb -
Debian ugidd_2.2beta47-20sarge2_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_mipsel.deb -
Debian ugidd_2.2beta47-20sarge2_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_powerpc.deb -
Debian ugidd_2.2beta47-20sarge2_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_s390.deb -
Debian ugidd_2.2beta47-20sarge2_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_sparc.deb
References
NFS-SERVER Remote Buffer Overflow Vulnerability
References:
References: