Slackware: 202304-14 Severe: Nfs-Mount Remote Service Disruption
gentoo
July 19, 2003
Local or remote attacker which is capable to send RPC request tovulnerable mountd daemon could execute artitrary code or causedenial of service.
Summary
- - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200307-07 - - ---------------------------------------------------------------------
- - ---------------------------------------------------------------------
quote from advisory:
"Local or remote attacker which is capable to send RPC request to vulnerable mountd daemon could execute artitrary code or cause denial of service."
read the full advisory at: http://marc.theaimsgroup.com/?l=bugtraq&m=105820223707191&w=2
SOLUTION
It is recommended that all Gentoo Linux users who are running net-fs/nfs-utils upgrade to nfs-utils-1.0.5 as follows
emerge sync emerge nfs-utils emerge clean
- - --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------
Topics Covered
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
PACKAGE : nfs-utils
SUMMARY : off by one bug
DATE : 2003-07-19 15:13 UTC
EXPLOIT : remote
VERSIONS AFFECTED : =nfs-utils-1.0.4
CVE : CAN-2003-0252
Topics Covered
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!