Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
NFS:OVERFLOW:XLOG-1BYTE-OF |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
NFS |
Keywords |
NFS-UTILS XLOG Off-By-One |
Release Date |
2004/10/20 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
NFS: NFS-UTILS XLOG Off-By-One
This signature detects attempts to exploit an off-by-one vulnerability in the Linux NFS implementation. Attackers can send malformed logging information in a maliciously crafted request to crash the server or execute arbitrary code.
Extended Description
A remote exploitable buffer overrun vulnerability has been reported in the xlog component of nfs-utils. It is possible to exploit this issue via mountd. It has been reported that exploitation of this issue will most likely result in a denial of service. There is a possibility that this issue could be exploited to run arbitrary code in the context of mountd, which runs as root.
Affected Products
- Nfs nfs-utils 0.2.0
- Nfs nfs-utils 0.2.1
- Nfs nfs-utils 0.3.1
- Nfs nfs-utils 0.3.3
- Nfs nfs-utils 1.0.0
- Nfs nfs-utils 1.0.1
- Nfs nfs-utils 1.0.3
- Sco openlinux_server 3.1.1
- Sco openlinux_workstation 3.1.1
- Sun cobalt_raq4_3001r
- Sun cobalt_raq_xtr
References