Description
Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to port 2049 (nfsd), as demonstrated by vd_xlink.pm.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Omni-NFS Server Buffer Overflow
exploit/windows/nfs/xlink_nfsd
Exploit-DB 2
- Omni-NFS Server - Remote Buffer Overflow (Metasploit) EDB-16389 · remote · Nov 11, 2010 · verified
- Omni-NFS Server 5.2 - 'nfsd.exe' Remote Stack Overflow (Metasploit) EDB-2729 · remote · Nov 6, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://gleg.net/vulndisco_meta.shtml
- 22751 third-party-advisory
- 20941 vdb-entry
- 2729 exploit
- ADV-2006-4380 vdb-entry
- http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz
- 1017172 vdb-entry
- 20061106 VulnDisco Pack for Metasploit mailing-list
- xlink-nfsserver-bo(30083) vdb-entry
- 1831 third-party-advisory