CVE-1999-0166: Medium severity Sun Nfs vulnerability
NFS allows users to use a "cd .." command to access other directories besides the exported file system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure the NFS server exports so clients are confined to the exported directory and cannot use 'cd ..' to access directories outside the export. Review and update /etc/exports (or your distribution's export configuration) to remove or change options that permit traversal and re-export the shares.
NFS Utils export confinement / prevent directory traversal = enabled - Compensating control
Until exports are reconfigured, restrict access to the NFS service at the network perimeter (firewall, host-based ACLs) to only trusted hosts and networks to limit exposure.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0166?
CVE-1999-0166 has a moderate severity rating due to its potential for unauthorized directory access.
How do I fix CVE-1999-0166?
To fix CVE-1999-0166, ensure proper configuration of NFS exports and restrict access to specific directories.
What software versions are affected by CVE-1999-0166?
CVE-1999-0166 affects certain versions of Sun NFS, particularly those allowing inadequate directory access.
What are the consequences of exploiting CVE-1999-0166?
Exploiting CVE-1999-0166 can allow an attacker to navigate outside the intended directory, potentially accessing sensitive files.
How can I detect CVE-1999-0166 in my environment?
You can detect CVE-1999-0166 by reviewing NFS configurations and testing directory access permissions for unauthorized navigation.