• info
• discussion
• exploit
• solution
• references

Linux NFS RPC.STATD Remote Denial Of Service Vulnerability

Solution:
Please see the referenced vendor advisories for further information.


nfs nfs-utils 1.0.6

• Mandrake nfs-utils-1.0.6-2.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake nfs-utils-1.0.6-2.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake nfs-utils-1.0.6-2.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake nfs-utils-1.0.6-2.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake nfs-utils-clients-1.0.6-2.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake nfs-utils-clients-1.0.6-2.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake nfs-utils-clients-1.0.6-2.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake nfs-utils-clients-1.0.6-2.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• RedHat nfs-utils-1.0.6-1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/nfs-utils-1.0.6 -1.2.legacy.i386.rpm


• RedHat nfs-utils-1.0.6-22.2.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/nfs-utils-1.0.6 -22.2.legacy.i386.rpm


• RedHat nfs-utils-1.0.6-1.1.legacy.i386.rpm
  RedHat Fedora Core 1
  http://download.fedoralegacy.org/fedora/1/updates/i386/nfs-utils-1.0.6 -1.1.legacy.i386.rpm


• Trustix nfs-utils-1.0.6-4tr.i586.rpm
  This fix should be retrieved for the relevant Trustix platform:
  http://www.trustix.org/download/


• TurboLinux nfs-utils-1.0.6-13.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/nfs-utils-1.0.6-13.i586.rpm


• TurboLinux nfs-utils-1.0.6-13.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/nfs-utils-1.0.6-13.i586.rpm


• Ubuntu nfs-common_1.0.6-3ubuntu1.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/nfs-utils/nfs-common_1.0 .6-3ubuntu1.1_amd64.deb


• Ubuntu nfs-common_1.0.6-3ubuntu1.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/nfs-utils/nfs-common_1.0 .6-3ubuntu1.1_i386.deb


• Ubuntu nfs-common_1.0.6-3ubuntu1.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/nfs-utils/nfs-common_1.0 .6-3ubuntu1.1_powerpc.deb


• Ubuntu nfs-kernel-server_1.0.6-3ubuntu1.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/nfs-utils/nfs-kernel-ser ver_1.0.6-3ubuntu1.1_amd64.deb


• Ubuntu nfs-kernel-server_1.0.6-3ubuntu1.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/nfs-utils/nfs-kernel-ser ver_1.0.6-3ubuntu1.1_i386.deb


• Ubuntu nfs-kernel-server_1.0.6-3ubuntu1.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/n/nfs-utils/nfs-kernel-ser ver_1.0.6-3ubuntu1.1_powerpc.deb


• Ubuntu nhfsstone_1.0.6-3ubuntu1.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/n/nfs-utils/nhfsstone_ 1.0.6-3ubuntu1.1_amd64.deb


• Ubuntu nhfsstone_1.0.6-3ubuntu1.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/n/nfs-utils/nhfsstone_ 1.0.6-3ubuntu1.1_i386.deb


• Ubuntu nhfsstone_1.0.6-3ubuntu1.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/n/nfs-utils/nhfsstone_ 1.0.6-3ubuntu1.1_powerpc.deb