nfs-utils DNS configuration denial of service
| nfs-utils-dns-dos (15418) |  Medium Risk |
Description:
nfs-utils is vulnerable to a denial of service, caused by a vulnerability in the get_reliable_hostbyaddr function in the support/export/hostname.c file. If the (Domain Name System) DNS is configured improperly, a remote attacker could submit an invalid reverse DNS lookup to cause the rpc.mountd (NFS mount daemon) to crash.
Platforms Affected:
- Olaf Kirch, nfs-utils prior to 1.0.6
- RedHat, Enterprise Linux 3 ES
- RedHat, Enterprise Linux 3 AS
- RedHat, Enterprise Linux 3 WS
- Trustix, Secure Linux 2.0
Remedy:
Upgrade to the latest version of nfs-utils (1.0.6 or later), available from the nfs-utils Web page. See References.
For Trustix Linux 2.0:
Upgrade to the latest version of nfs-utils (1.0.6-1tr or later), as listed in Trustix Security Advisory #2004-0009. See References.
Consequences:
Denial of Service
References:
- Debian Bugs Mailing List, Tue Sep 09 03:51:47 2003, rpc.mountd SEGVs at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=209318.
- nfs-utils Web page, nfs/nfs-utils at http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/.
- BID-9813: NFS-Utils rpc.mountd Denial Of Service Vulnerability
- CVE-2004-0154: rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
- RHSA-2004-072: nfs-utils security update
Reported:
Mar 05, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net