CVE-1999-0832: Buffer Overflow
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NFS serverfrom your environment.Uninstall or stop the NFS server on affected systems if NFS functionality is not required.
- Configuration
Restrict NFS exports to trusted hosts only (remove or limit exports to untrusted networks) and reload/restart the NFS service.
NFS server exported filesystems / access controls = restrict to trusted hosts only - Compensating control
Block or restrict network access to the NFS server from untrusted networks (for example via firewall rules or network ACLs) to prevent remote exploitation until a fix is available.
- Operational
Stop the NFS service on affected hosts until a vendor-supplied patch is available; investigate for signs of compromise and rotate any credentials or keys that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0832?
CVE-1999-0832 is considered critical as it allows attackers to execute arbitrary commands on affected systems.
How do I fix CVE-1999-0832?
To mitigate CVE-1999-0832, you should upgrade to a patched version of the NFS server provided by your distribution.
Which versions of Linux are affected by CVE-1999-0832?
CVE-1999-0832 affects specific versions of Debian Linux 2.1 and Red Hat Linux 5.2.
What type of attack does CVE-1999-0832 facilitate?
CVE-1999-0832 facilitates remote command execution via a buffer overflow through a long pathname.
Is there a workaround for CVE-1999-0832?
A temporary workaround for CVE-1999-0832 includes disabling the NFS server until a patch can be applied.