Published: 22/12/2005 Updated: 03/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in the Network Block Device (nbd) server 2.7.5 and previous versions, and 2.8.0 up to and including 2.8.2, allows remote malicious users to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wouter verhelst nbd 2.8.0
wouter verhelst nbd 2.8.2
wouter verhelst nbd

Debian Bug report logs - #611187 nbd-server dies due to EFAULT from read Package: nbd-server; Maintainer for nbd-server is Wouter Verhelst <wouter@debianorg>; Source for nbd-server is src:nbd (PTS, buildd, popcon) Reported by: Ian Jackson <IanJackson@eucitrixcom> Date: Wed, 26 Jan 2011 15:03:02 UTC Severity: ser ...

It was discovered a regression of a buffer overflow (CVE-2005-3534) in NBD, the Network Block Device server, that could allow arbitrary code execution on the NBD server via a large request For the oldstable distribution (lenny), this problem has been fixed in version 1:2911-3lenny1 The stable distribution (squeeze), the testing distribution (wh ...

Kurt Fitzner discovered a buffer overflow in nbd, the network block device client and server that could potentially allow arbitrary code on the NBD server For the old stable distribution (woody) this problem has been fixed in version 12cvs20020320-3woody3 For the stable distribution (sarge) this problem has been fixed in version 273-3sarge1 ...

CWE-119 http://sourceforge.net/mailarchive/forum.php?thread_id=9201144&forum_id=40388 http://www.debian.org/security/2005/dsa-924 http://www.securityfocus.com/bid/16029 http://secunia.com/advisories/18135 http://secunia.com/advisories/18171 http://bugs.gentoo.org/show_bug.cgi?id=116314 http://www.gentoo.org/security/en/glsa/glsa-200512-14.xml http://www.osvdb.org/21848 http://secunia.com/advisories/18209 http://secunia.com/advisories/18315 http://sourceforge.net/project/shownotes.php?release_id=380202&group_id=13229 http://sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229 http://secunia.com/advisories/18503 http://secunia.com/advisories/43353 http://secunia.com/advisories/43610 https://usn.ubuntu.com/237-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187 https://nvd.nist.gov https://www.debian.org/security/./dsa-2183

CVE-2005-3534

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect