search menu icon-carat-right cmu-wordmark

CERT Coordination Center

Linux NFS utils package "rpc.mountd" contains off-by-one buffer overflow in xlog() function

Vulnerability Note VU#258564

Original Release Date: 2003-09-17 | Last Revised: 2003-09-17


A vulnerability in the Linux NFS (network File System) could permit an attacker to cause a denial of service, or potentially execute arbitrary code on the system.


The Linux NFS (network File System) was developed to allow machines to mount a disk partition on a remote machine as if it were on a local hard drive. An off-by-one overflow exist in the xlog() function which handles logging of requests. Any attacker that is able to send RPC requests to vulnerable mountd daemon could exploit this vulnerability.

An exploit for this vulnerability has been reported in the wild.


A remote attacker may be able to cause a denial of service, or potentially execute arbitrary code on the system.


Version 1.0.4 has been released to address this issue.

Vendor Information


Linux NFS Affected

Updated:  September 17, 2003



Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.


The CERT/CC has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.

CVSS Metrics

Group Score Vector



Thanks to Janusz Niewiadomski for reporting this vulnerability.

This document was written by Jason A Rafail.

Other Information

CVE IDs: CVE-2003-0252
Severity Metric: 13.39
Date Public: 2003-07-14
Date First Published: 2003-09-17
Date Last Updated: 2003-09-17 19:36 UTC
Document Revision: 6

Sponsored by CISA.