OSVDB ID: 12240

Title: nfs-utils rpc.statd SIGPIPE TCP Connection DoS

Info

Disclosure

Dec 07, 2004

Discovery

Unknown

Dates

Exploit

Dec 07, 2004

Solution

Unknown

Description

nfs-utils rpc.statd contains a flaw that may allow a remote denial of service. The issue is triggered when a TCP connection is closed early, and will result in a loss of availability.

Classification

Location: Remote/Network Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Upgrade to version 1.0.6-r6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

NFS

nfs-utils

1.0.6

References

Credit

  • SGI - SGI


Direct URL: http://osvdb.org/36218