OSVDB ID: 11279

Title: Linux NFS Server Pathname Overflow

Info

Disclosure

Nov 09, 1999

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in NFS Server. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request containing an overly long pathname on a read-write mounted NFS directory, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Rumored / Private
Disclosure: OSVDB Verified

Solution

Contact your vendor for an appropriate upgrade. An upgrade is required as there are no known workarounds.

Products

Software in the Public Interest, Inc.

Debian Linux

2.1

Red Hat, Inc.

Linux

5.2
4.2

Slackware Linux, Inc.

Slackware

7.0

SUSE LINUX AG

SUSE LINUX

6.2
6.1

SCO Group, Inc.

Caldera OpenLinux

2.3

References

Credit

  • Mariusz Marcinkiewicz - tmoggBrand New Doo Doozigzag.pl -


Direct URL: http://osvdb.org/36218