CVE-2000-0508: Medium severity Debian Debian Linux vulnerability
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rpc.lockdfrom your environment.Uninstall the rpc.lockd package from systems where NFS locking functionality is not needed.
- Configuration
Disable the rpc.lockd (NFS lock daemon) service on affected systems if NFS locking is not required to prevent remote attackers from triggering a denial of service via malformed requests.
rpc.lockd service_enabled = false - Compensating control
Restrict access to the rpc.lockd service at network boundaries (firewall/ACL) so only trusted hosts can reach the service; block exposure of RPC/lockd to untrusted networks.
- Operational
Monitor Debian, Mandrake, and Red Hat vendor security advisories for a supplied patch/fix for rpc.lockd and apply vendor-supplied updates as soon as they are released.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0508?
CVE-2000-0508 has a severity rating that indicates it can lead to a denial of service attack.
How do I fix CVE-2000-0508?
To fix CVE-2000-0508, you should update your system to a version of Red Hat Linux or Mandrake Linux that is not vulnerable.
Which versions are affected by CVE-2000-0508?
CVE-2000-0508 affects Red Hat Linux 6.1 and 6.2, as well as various versions of Mandrake and Debian Linux.
Can CVE-2000-0508 be exploited remotely?
Yes, CVE-2000-0508 can be exploited remotely through malformed requests sent to rpc.lockd.
What is rpc.lockd in relation to CVE-2000-0508?
rpc.lockd is a service in Linux that is affected by CVE-2000-0508, allowing attackers to cause a denial of service.