CVE-2004-0154 rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nfs-utils | = 1.0 | No fix listed |
| nfs-utils | = 1.0.1 | No fix listed |
| nfs-utils | = 1.0.3 | No fix listed |
| nfs-utils | = 1.0.4 | No fix listed |
| nfs-utils | = 1.0.6 | No fix listed |
| debian/nfs-utils(Debian:12) | < 1:1.0.5-3 | 1:1.0.5-3 |
| debian/nfs-utils(Debian:13) | < 1:1.0.5-3 | 1:1.0.5-3 |
| debian/nfs-utils(Debian:14) | < 1:1.0.5-3 | 1:1.0.5-3 |
References
- bugzilla.redhat.com exploit vendor-advisory
- RHSA-2004:072 patch vendor-advisory
- 9813 patch vdb-entry vendor-advisory
- 2004-0009 patch vendor-advisory
- nfs-utils-dns-dos(15418) vdb-entry
- oval:org.mitre.oval:def:861 signature vdb-entry
- oval:org.mitre.oval:def:9673 signature vdb-entry
- Debian Security Tracker CVE-2004-0154 vendor-advisory