Vulnerabilities > CVE-2002-0830 - Denial Of Service vulnerability in Multiple Vendor BSD NFS Zero-Length RPC Message
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 1 |
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-013.txt.asc
- http://marc.info/?l=bugtraq&m=102865517214722&w=2
- http://www.info.apple.com/usen/security/security_updates.html
- http://www.osvdb.org/5072
- http://www.securityfocus.com/bid/5402
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9772