Multiple Vendor BSD NFS Zero-Length RPC Message Denial Of Service Vulnerability

Solution:
FreeBSD users are advised to apply the following patch or to upgrade to RELENG_4, RELENG_4_6, RELENG_4_5, or RELENG_4_4 CVS branches.

NetBSD 1.5.3 and earlier are vulnerable to this issue. Users are strongly urged to upgrade to NetBSD 1.6 which is not vulnerable to this issue. Further details are available in the referenced advisory.

Patches are available:


FreeBSD FreeBSD 4.0

FreeBSD FreeBSD 4.1

FreeBSD FreeBSD 4.1.1 -RELEASE

FreeBSD FreeBSD 4.1.1 -STABLE

FreeBSD FreeBSD 4.1.1

FreeBSD FreeBSD 4.2

FreeBSD FreeBSD 4.2 -RELEASE

FreeBSD FreeBSD 4.2 -STABLE

FreeBSD FreeBSD 4.3 -STABLE

FreeBSD FreeBSD 4.3

FreeBSD FreeBSD 4.3 -RELEASE

FreeBSD FreeBSD 4.3 -RELENG

FreeBSD FreeBSD 4.4

FreeBSD FreeBSD 4.4 -STABLE

FreeBSD FreeBSD 4.4 -RELENG

FreeBSD FreeBSD 4.5

FreeBSD FreeBSD 4.5 -STABLE

FreeBSD FreeBSD 4.5 -RELEASE

FreeBSD FreeBSD 4.6 -RELEASE

FreeBSD FreeBSD 4.6 -STABLE

FreeBSD FreeBSD 4.6


 

Privacy Statement
Copyright 2010, SecurityFocus