Published: 10/01/2005 Updated: 19/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

statd in nfs-utils 1.257 and previous versions does not ignore the SIGPIPE signal, which allows remote malicious users to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nfs nfs-utils 1.0.6
debian debian linux 3.0
mandrakesoft mandrake linux 9.2
mandrakesoft mandrake linux corporate server 2.1
mandrakesoft mandrake linux 10.1
redhat enterprise linux desktop 3.0
mandrakesoft mandrake linux 10.0
redhat enterprise linux 3.0

SGI discovered a remote Denial of Service vulnerability in the NFS statd server statd did not ignore the “SIGPIPE” signal which caused it to shutdown if a misconfigured or malicious peer terminated the TCP connection prematurely ...

Synopsis nfs-utils security update Type/Severity Security Advisory: Important Topic An updated nfs-utils package that fixes various security issues is nowavailable Description The nfs-utils package provides a daemon for the kernel NFS server andrelated toolsSGI reported that the statd dae ...

Synopsis nfs-utils security update Type/Severity Security Advisory: Important Topic An updated nfs-utils package that fixes various security issues is nowavailable Description The nfs-utils package provides a daemon for the kernel NFS server andrelated tools, providing a much higher level ...

NVD-CWE-Other http://www.securityfocus.com/bid/11785 http://www.debian.org/security/2004/dsa-606 http://www.redhat.com/support/errata/RHSA-2004-583.html http://www.redhat.com/support/errata/RHSA-2005-014.html http://www.trustix.org/errata/2004/0065/http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup https://www.ubuntu.com/usn/usn-36-1/https://exchange.xforce.ibmcloud.com/vulnerabilities/18332 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899 http://www.securityfocus.com/archive/1/426072/30/6740/threaded https://usn.ubuntu.com/36-1/https://nvd.nist.gov

CVE-2004-1014

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect