• info
• discussion
• exploit
• solution
• references

SunOS NFS large uid mismatch Vulnerability

NFS server in which a client presenting a 32-bit uid in which the 16 low-order bits are 0 gets interpreted as root on the server. The impact of this issue is that it may allow an attacker to gain unauthorized privileges on a host.

This is Sun Bug ID 1095935.