Rapid7 Vulnerability & Exploit Database

CESA-2007:0913: nfs-utils-lib security update

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

CESA-2007:0913: nfs-utils-lib security update

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
09/05/2007
Created
07/25/2018
Added
03/12/2010
Modified
07/04/2017

Description

An updated nfs-utils-lib package to correct a security flaw is now available for CentOS Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team.

The nfs-utils-lib package contains support libraries that are needed by the commands and daemons of the nfs-utils package. Tenable Network Security discovered a stack buffer overflow flaw in the RPC library used by nfs-utils-lib. A remote unauthenticated attacker who can access an application linked against nfs-utils-lib could trigger this flaw and cause the application to crash. On CentOS Linux 4 it is not possible to exploit this flaw to run arbitrary code as the overflow is blocked by FORTIFY_SOURCE. (CVE-2007-3999) Users of nfs-utils-lib are advised to upgrade to this updated package, which contains a backported patch that resolves this issue.

Solution(s)

  • centos-upgrade-nfs-utils-lib
  • centos-upgrade-nfs-utils-lib-devel

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;