|
Family: Ubuntu Local Security Checks --> Category: infos
USN36-1 : nfs-utils vulnerability Vulnerability Scan
Vulnerability Scan Summary nfs-utils vulnerability
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- nfs-common
- nfs-kernel-server
- nhfsstone
Description :
SGI discovered a remote Denial of Service vulnerability in the NFS
statd server. statd did not ignore the "SIGPIPE" signal which caused
it to shutdown if a misconfigured or malicious peer terminated the TCP
connection prematurely.
Solution :
Upgrade to :
- nfs-common-1.0.6-3ubuntu1.1 (Ubuntu 4.10)
- nfs-kernel-server-1.0.6-3ubuntu1.1 (Ubuntu 4.10)
- nhfsstone-1.0.6-3ubuntu1.1 (Ubuntu 4.10)
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|