Debian Security Advisory

nfs-server -- buffer overflow in the NFS server

Date Reported:

11 Nov 1999

Affected Packages:

nfs-server

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-1999-0832.

More information:

The version of nfs-server that was distributed in Debian GNU/Linux 2.1 had a buffer overflow in fh_buildpath(). It assumed that the total length of a path would never exceed (PATH_MAX_NAME_MAX). With a read/write exported directory, people could create longer paths and cause a buffer overflow.

This has been addressed in version 2.2beta37-1slink.1, and we recommend you upgrade your nfs-server package immediately.

Fixed in:

Source:: http://security.debian.org/dists/slink/updates/source/nfs-server_2.2beta37-1slink.1.diff.gz; http://security.debian.org/dists/slink/updates/source/nfs-server_2.2beta37-1slink.1.dsc; http://security.debian.org/dists/slink/updates/source/nfs-server_2.2beta37.orig.tar.gz
Alpha:: http://security.debian.org/dists/slink/updates/binary-alpha/nfs-server_2.2beta37-1slink.1_alpha.deb
i386:: http://security.debian.org/dists/slink/updates/binary-i386/nfs-server_2.2beta37-1slink.1_i386.deb
m68k:: http://security.debian.org/dists/slink/updates/binary-m68k/nfs-server_2.2beta37-1slink.1_m68k.deb
Sparc:: http://security.debian.org/dists/slink/updates/binary-sparc/nfs-server_2.2beta37-1slink.1_sparc.deb