Security Advisory (MDKSA-2003:076): nfs-utils

[aru]

MandrakeSoft Security Advisory MDKSA-2003:076 : nfs-utils

 

July 21st, 2003

Updated nfs-utils packages fix buffer overflow

 

An off-by-one buffer overflow was found in the logging code in nfs-utils when adding a newline to the string being logged. This could allow an attacker to execute arbitrary code or cause a DoS (Denial of Service) on the server by sending certain RPC requests.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 8.2

 

[*] 9.0

 

[*] 9.1

 

[*] Corporate Server 2.1

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:076

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0252

 

Posted automatically by aru (mdksec2mub v0.0.6)