Overview
A vulnerability in the Linux NFS (network File System) could permit an attacker to cause a denial of service, or potentially execute arbitrary code on the system.
Description
The Linux NFS (network File System) was developed to allow machines to mount a disk partition on a remote machine as if it were on a local hard drive. An off-by-one overflow exist in the xlog() function which handles logging of requests. Any attacker that is able to send RPC requests to vulnerable mountd daemon could exploit this vulnerability. An exploit for this vulnerability has been reported in the wild. |
Impact
A remote attacker may be able to cause a denial of service, or potentially execute arbitrary code on the system. |
Solution
Version 1.0.4 has been released to address this issue. |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to Janusz Niewiadomski for reporting this vulnerability.
This document was written by Jason A Rafail.
Other Information
| CVE IDs: | CVE-2003-0252 |
| Severity Metric: | 13.39 |
| Date Public: | 2003-07-14 |
| Date First Published: | 2003-09-17 |
| Date Last Updated: | 2003-09-17 19:36 UTC |
| Document Revision: | 6 |