• info
• discussion
• exploit
• solution
• references

NFS-SERVER Remote Buffer Overflow Vulnerability

Solution:
Please see the referenced advisories for more information and fixes.


nfs nfs-server 2.2.beta51

• SuSE nfs-server-2.2beta51-206.4.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/nfs-server-2.2bet a51-206.4.i586.rpm


• SuSE nfs-server-2.2beta51-206.4.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/nfs-server-2. 2beta51-206.4.x86_64.rpm


• SuSE nfs-server-2.2beta51-208.2.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/nfs-server-2.2bet a51-208.2.i586.rpm


• SuSE nfs-server-2.2beta51-208.2.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/nfs-server-2.2b eta51-208.2.x86_64.rpm


• SuSE nfs-server-2.2beta51-209.2.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/nfs-server-2.2bet a51-209.2.i586.rpm


• SuSE nfs-server-2.2beta51-209.2.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/nfs-server-2.2b eta51-209.2.x86_64.rpm


• SuSE nfs-server-2.2beta51-212.2.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/nfs-server-2.2be ta51-212.2.i586.rpm


• SuSE nfs-server-2.2beta51-212.2.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/nfs-server-2.2bet a51-212.2.ppc.rpm


• SuSE nfs-server-2.2beta51-212.2.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/nfs-server-2.2 beta51-212.2.x86_64.rpm

nfs nfs-server 2.2.beta47

• Debian nfs-user-server_2.2beta47-12woody1_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_alpha.deb


• Debian nfs-user-server_2.2beta47-12woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_arm.deb


• Debian nfs-user-server_2.2beta47-12woody1_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_hppa.deb


• Debian nfs-user-server_2.2beta47-12woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_i386.deb


• Debian nfs-user-server_2.2beta47-12woody1_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_ia64.deb


• Debian nfs-user-server_2.2beta47-12woody1_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_m68k.deb


• Debian nfs-user-server_2.2beta47-12woody1_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_mips.deb


• Debian nfs-user-server_2.2beta47-12woody1_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_mipsel.deb


• Debian nfs-user-server_2.2beta47-12woody1_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_powerpc.deb


• Debian nfs-user-server_2.2beta47-12woody1_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_s390.deb


• Debian nfs-user-server_2.2beta47-12woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-12woody1_sparc.deb


• Debian nfs-user-server_2.2beta47-20sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_alpha.deb


• Debian nfs-user-server_2.2beta47-20sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_amd64.deb


• Debian nfs-user-server_2.2beta47-20sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_arm.deb


• Debian nfs-user-server_2.2beta47-20sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_hppa.deb


• Debian nfs-user-server_2.2beta47-20sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_i386.deb


• Debian nfs-user-server_2.2beta47-20sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_ia64.deb


• Debian nfs-user-server_2.2beta47-20sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_m68k.deb


• Debian nfs-user-server_2.2beta47-20sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_mips.deb


• Debian nfs-user-server_2.2beta47-20sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_mipsel.deb


• Debian nfs-user-server_2.2beta47-20sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_powerpc.deb


• Debian nfs-user-server_2.2beta47-20sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_s390.deb


• Debian nfs-user-server_2.2beta47-20sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/nfs-use r-server_2.2beta47-20sarge2_sparc.deb


• Debian ugidd_2.2beta47-12woody1_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_alpha.deb


• Debian ugidd_2.2beta47-12woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_arm.deb


• Debian ugidd_2.2beta47-12woody1_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_hppa.deb


• Debian ugidd_2.2beta47-12woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_i386.deb


• Debian ugidd_2.2beta47-12woody1_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_ia64.deb


• Debian ugidd_2.2beta47-12woody1_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_m68k.deb


• Debian ugidd_2.2beta47-12woody1_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_mips.deb


• Debian ugidd_2.2beta47-12woody1_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_mipsel.deb


• Debian ugidd_2.2beta47-12woody1_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_powerpc.deb


• Debian ugidd_2.2beta47-12woody1_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_s390.deb


• Debian ugidd_2.2beta47-12woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-12woody1_sparc.deb


• Debian ugidd_2.2beta47-20sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_alpha.deb


• Debian ugidd_2.2beta47-20sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_amd64.deb


• Debian ugidd_2.2beta47-20sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_arm.deb


• Debian ugidd_2.2beta47-20sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_hppa.deb


• Debian ugidd_2.2beta47-20sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_i386.deb


• Debian ugidd_2.2beta47-20sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_ia64.deb


• Debian ugidd_2.2beta47-20sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_m68k.deb


• Debian ugidd_2.2beta47-20sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_mips.deb


• Debian ugidd_2.2beta47-20sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_mipsel.deb


• Debian ugidd_2.2beta47-20sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_powerpc.deb


• Debian ugidd_2.2beta47-20sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_s390.deb


• Debian ugidd_2.2beta47-20sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/n/nfs-user-server/ugidd_2 .2beta47-20sarge2_sparc.deb