CVE-2004-0946
NoneCVSS
—
EPSS
11.3%
Published
Jan 10, 2005
CISA due date
—
The record
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:3::as | nfs-utils | 0 | 0:1.0.6-33EL |
| Red Hat:enterprise_linux:3::as | nfs-utils-debuginfo | 0 | 0:1.0.6-33EL |
| Red Hat:enterprise_linux:3::desktop | nfs-utils | 0 | 0:1.0.6-33EL |
| Red Hat:enterprise_linux:3::desktop | nfs-utils-debuginfo | 0 | 0:1.0.6-33EL |
| Red Hat:enterprise_linux:3::es | nfs-utils | 0 | 0:1.0.6-33EL |
| Red Hat:enterprise_linux:3::es | nfs-utils-debuginfo | 0 | 0:1.0.6-33EL |
| Red Hat:enterprise_linux:3::ws | nfs-utils | 0 | 0:1.0.6-33EL |
| Red Hat:enterprise_linux:3::ws | nfs-utils-debuginfo | 0 | 0:1.0.6-33EL |