CVE-2004-0946 rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers...
HighCVSS 10.0
EPSS 11.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nfs-utils | = 1.0 | No fix listed |
| nfs-utils | = 1.0.1 | No fix listed |
| nfs-utils | = 1.0.2 | No fix listed |
| nfs-utils | = 1.0.3 | No fix listed |
| nfs-utils | = 1.0.4 | No fix listed |
| nfs-utils | = 1.0.6 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
References
- bugs.gentoo.org
- 13440 third-party-advisory
- GLSA-200412-08 patch vendor-advisory
- VU#698302 third-party-advisory us-government-resource
- MDKSA-2005:005 vendor-advisory
- RHSA-2004:583 patch vendor-advisory
- RHSA-2005:014 vendor-advisory
- FLSA-2006:138098 vendor-advisory
- 11911 patch vdb-entry vendor-advisory
- nfsutils-getquotainfo-bo(18455) vdb-entry
- oval:org.mitre.oval:def:10464 signature vdb-entry
- Debian Security Tracker CVE-2004-0946 vendor-advisory