Executive Summary

Informations
Name CVE-2004-0154 First vendor Publication 2004-06-14
Vendor Cve Last vendor Modification 2024-11-20

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0154

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:861
 
Oval ID: oval:org.mitre.oval:def:861
Title: rpc.mountd Denial of Service via NFS Mount
Description: rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
Family: unix Class: vulnerability
Reference(s): CVE-2004-0154
Version: 4
Platform(s): Red Hat Enterprise Linux 3
Product(s): nfs-utils packages
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:9673
 
Oval ID: oval:org.mitre.oval:def:9673
Title: rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
Description: rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
Family: unix Class: vulnerability
Reference(s): CVE-2004-0154
Version: 5
Platform(s): Red Hat Enterprise Linux 3
CentOS Linux 3
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 5

Open Source Vulnerability Database (OSVDB)

Id Description
4198 nfs-utils rpc.mountd Malformed Reverse DNS Entry DoS

The rpc.mountd program distributed with nfs-utils contains a flaw that may allow a remote denial of service. The issue is triggered when a mountd request is made with an invalid reverse DNS entry, and will result in loss of availability for the service.

Nessus® Vulnerability Scanner

Date Description
2004-07-06 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2004-072.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535
http://www.redhat.com/support/errata/RHSA-2004-072.html
http://www.securityfocus.com/bid/9813
http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/15418
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2024-11-28 23:23:03
  • Multiple Updates
2024-11-28 12:06:00
  • Multiple Updates
2021-05-04 12:02:16
  • Multiple Updates
2021-04-22 01:02:25
  • Multiple Updates
2020-05-23 00:15:43
  • Multiple Updates
2017-10-11 09:23:20
  • Multiple Updates
2017-07-11 12:01:23
  • Multiple Updates
2016-04-26 12:47:13
  • Multiple Updates
2014-02-17 10:27:13
  • Multiple Updates
2013-05-11 11:39:57
  • Multiple Updates