CVE-1999-0211: Medium severity Sun SunOS vulnerability
Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure export lists for mount daemons do not exceed 256 characters. Shorten host lists or split exports into multiple export entries so each export list is 256 characters or fewer, then reload/restart the mount daemon to apply changes.
SunOS mount daemon export_list_length = <=256 - Compensating control
Restrict who can mount NFS exports by implementing network controls: limit NFS/mount daemon access to trusted IP ranges via firewall rules or host-based ACLs and isolate NFS service to management/trusted networks.
- Operational
Audit all current NFS export lists and identify any entries longer than 256 characters; remediate those entries (shorten or split) and restart affected mount daemons. Monitor logs for unauthorized mount attempts after remediation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0211?
CVE-1999-0211 has a high severity rating due to its potential to allow unauthorized users to mount NFS directories.
How do I fix CVE-1999-0211?
To fix CVE-1999-0211, ensure that mount daemons are configured to limit export lists to less than 256 characters.
Which software versions are affected by CVE-1999-0211?
CVE-1999-0211 affects SunOS versions 4.1.1, 4.1.2, 4.1.3, 4.1.3c, and 5.0.
What is the impact of CVE-1999-0211?
The impact of CVE-1999-0211 is that it allows attackers to mount NFS directories, potentially leading to data exposure.
Is there a workaround for CVE-1999-0211?
A potential workaround for CVE-1999-0211 is to restrict access controls for NFS shares in the mount daemon configuration.