NFS Buffer Overflow

This protocol anomaly is an NFS message with data buffer that exceeds the user-defined maximum. The default data buffer maximum is 8096; you can change this setting in the Sensor Settings Rulebase>Protocol Thresholds and Configuration>NFS>Maximum buffer length for read/write.

Extended Description

A protocol anomaly exists when an RPC NFS message contains data that exceeds the specified length. Some NFS implementations may be vulnerable in how they process such unusual exception conditions. The security flaws in these products may be exploited to cause a denial of service or some other attack.

References

URL: http://www.freesoft.org/CIE/Topics/115.htm

Short Name

NFS:OVERFLOW:BUF-OVERFLOW

Severity

Major

Recommended

False

Recommended Action

None

NFS Buffer Overflow

Extended Description

References

Found a potential security threat?