Info

Disclosure

Feb 26, 2006

Discovery

Unknown

Dates

Exploit

Feb 26, 2006

Solution

Unknown

Description

FreeBSD contains a flaw that may allow a remote denial of service. The issue is triggered when a malformed mount request is received, and will result in loss of availability for the platform.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

FreeBSD Project

FreeBSD

6.0

References

Milw0rm: 1540
Exploit Database: 1540
Bugtraq ID: 16838
Secunia Advisory ID: 19017
CVE ID: 2006-0900 (see also: NVD)
SCIP VulDB ID: 2063
Metasploit ID: 23511
ISS X-Force ID: 24918
Vendor Specific Advisory URL: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:10.nfs.asc
Vendor Specific Solution URL: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:10/nfs.patch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:10/nfs.patch.asc ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:10/nfs4.patch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:10/nfs4.patch.asc
Mail List Post: http://archives.neohapsis.com/archives/dailydave/2006-q1/0197.html
http://lists.immunitysec.com/pipermail/dailydave/2006-February/002982.html
Other Advisory URL: http://securityreason.com/securityalert/521
Keyword: ProtoVer NFS testsuite

Credit

Evgeny Legerov - admingleg.net - GLEG, Ltd.

Direct URL: http://osvdb.org/23511