CVE-2003-0252 Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via cer...
CriticalCVSS 9.8
EPSS 15.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux-nfs nfs-utils | < 1.0.4 | 1.0.4 |
| debian/nfs-utils(Debian:12) | < 1:1.0.3-2 | 1:1.0.3-2 |
| debian/nfs-utils(Debian:13) | < 1:1.0.3-2 | 1:1.0.3-2 |
| debian/nfs-utils(Debian:14) | < 1:1.0.3-2 | 1:1.0.3-2 |
References
- 20030714 Linux nfs-utils xlog() off-by-one bug broken-link mailing-list vendor-advisory
- 20030714 Reality of the rpc.mountd bug broken-link mailing-list vendor-advisory
- isec.pl exploit third-party-advisory
- 20030714 Linux nfs-utils xlog() off-by-one bug exploit mailing-list
- 20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b) mailing-list patch
- 20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq mailing-list
- 9259 broken-link third-party-advisory
- 1007187 broken-link third-party-advisory vdb-entry
- 1001262 broken-link vendor-advisory
- DSA-349 broken-link vendor-advisory
- VU#258564 third-party-advisory us-government-resource
- MDKSA-2003:076 third-party-advisory vendor-advisory
- SuSE-SA:2003:031 broken-link vendor-advisory
- RHSA-2003:206 broken-link vendor-advisory
- RHSA-2003:207 broken-link vendor-advisory
- 8179 broken-link third-party-advisory vdb-entry
- TLSA-2003-44 broken-link vendor-advisory
- nfs-utils-offbyone-bo(12600) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:443 broken-link signature vdb-entry
- Debian Security Tracker CVE-2003-0252 vendor-advisory