Login Request a demo
Unscored severity · published Jan 10, 2005
CVE-2004-0946
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and…
–
CVSS
11.3%
EPSS
No
On KEV
Description
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
3.0; 3.0; 3.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
3.0 · source: NVD
NF
Nfs-utils · Nfs
1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.6 · source: NVD
Affected product
NF
Nfs-utils
Nfs
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0946
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0946
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=72113
secunia.com
http://secunia.com/advisories/13440/
Patch
http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml
US Government Resource
http://www.kb.cert.org/vuls/id/698302
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2005:005
Patch
http://www.redhat.com/support/errata/RHSA-2004-583.html
More from Nfs-utils
–
CVE-2009-0180
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to…
–
CVE-2008-4552
The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP Wrappers…
–
CVE-2004-1014
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection…
–
CVE-2004-0154
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup…