nfs-utils: arbitrary code execution [LWN.net]

Package(s):

nfs-utils

CVE #(s):

CAN-2004-0946

Created:

January 11, 2005

Updated:

February 27, 2006

Description:

Arjan van de Ven discovered a buffer overflow in rquotad on 64bit architectures; an improper integer conversion could lead to a buffer overflow. An attacker with access to an NFS share could send a specially crafted request which could then lead to the execution of arbitrary code.

Alerts:

Fedora-Legacy	FLSA:138098	2006-02-25
Red Hat	RHSA-2005:014-01	2005-01-12
Mandrake	MDKSA-2005:005	2005-01-11

(Log in to post comments)