CVE-2003-0252

CRITICAL

nfs-utils < 1.0.4 - Denial of Service and Possible Remote Code Execution via xlog Function

Title source: llm
STIX 2.1

Description

Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.

References (19)

Core 19
Core References
Broken Link vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2003-206.html
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/8179
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105839032403325&w=2
Exploit, Third Party Advisory x_refsource_misc
http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt
Broken Link vendor-advisory x_refsource_turbo
http://www.turbolinux.com/security/TLSA-2003-44.txt
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2003-207.html
Exploit, Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105820223707191&w=2
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1007187
Broken Link, Vendor Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html
Third Party Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2003:076
Broken Link, Vendor Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html
Mailing List, Patch mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=105830921519513&w=2
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/9259
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/12600
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/258564
Broken Link vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-349

Scores

CVSS v3 9.8
EPSS 0.1578
EPSS Percentile 96.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-193
Status published
Products (1)
linux-nfs/nfs-utils < 1.0.4
Published Aug 18, 2003
Tracked Since Feb 18, 2026