SkipNavigation
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric



 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#698302

nfs-utils vulnerable to buffer overflow in "getquotainfo()" in "rquota_server.c"

Overview

A vulnerability in nfs-utils could permit an attacker to execute arbitrary code on the system or cause a denial of service.

I. Description

The NFS protocol provides remote access to shared files accross networks. The nfs-utils package provides an NFS client and server for Linux systems. Nfs-utils on 64-bit architecture machines contains a stack-based buffer overflow vulnerability. The function "getquotainfo()" in "rquota_server.c" assumes certain values to be 32-bit in size during a call to memcpy(). On a 64-bit machine, this can cause a buffer overflow.

II. Impact

A remote attacker could execute arbitrary code or create a denial-of-service condition on a vulnerable server running nfs-utils.

III. Solution

Apply a patch from your vendor

For vendor-specific information regarding vulnerable status and patch availability, please see the vendor section of this document.

Systems Affected

VendorStatusDate NotifiedDate Updated
ConectivaUnknown14-Jan-2005
DebianNot Vulnerable17-Jan-2005
EMC CorporationUnknown14-Jan-2005
Hewlett-Packard CompanyUnknown14-Jan-2005
IBM-zSeriesUnknown14-Jan-2005
IBM eServerUnknown14-Jan-2005
ImmunixUnknown14-Jan-2005
Ingrian NetworksUnknown14-Jan-2005
MandrakeSoftVulnerable14-Jan-2005
MontaVista SoftwareUnknown14-Jan-2005
NovellUnknown14-Jan-2005
Openwall GNU/*/LinuxUnknown14-Jan-2005
Red Hat Inc.Vulnerable20-Jan-2005
SCOUnknown14-Jan-2005
SequentUnknown14-Jan-2005
SGIUnknown14-Jan-2005
Sun Microsystems Inc.Not Vulnerable20-Jan-2005
SuSE Inc.Unknown14-Jan-2005
TurboLinuxVulnerable4-Apr-2005

References


http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml
http://secunia.com/advisories/13440/
http://xforce.iss.net/xforce/xfdb/18455
http://www.securityfocus.com/bid/11911
http://nfs.sourceforge.net/

Credit

Red Hat credits Arjan van de Ven with reporting this vulnerability.

This document was written by Will Dormann.

Other Information

Date Public:2004-11-22
Date First Published:2005-03-04
Date Last Updated:2005-04-04
CERT Advisory: 
CVE-ID(s):CAN-2004-0946
NVD-ID(s):CAN-2004-0946
US-CERT Technical Alerts: 
Metric:7.48
Document Revision:7

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2005 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader