PT-2006-6459 · Xlink · Xlink Omni-Nfs Server

Evgeny Legerov · Published 2006-11-07 · Updated 2018-10-17 · CVE-2006-5780

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: XLink Omni-NFS Server version 5.2

Description: A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted TCP packet to port 2049 (nfsd).

Recommendations: For XLink Omni-NFS Server version 5.2, consider restricting access to the nfsd service on port 2049 until a patch is available. As a temporary workaround, disabling the nfsd service can help minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-5780

Affected Products

Xlink Omni-Nfs Server

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/nfs/xlink_nfsd.rb · Exploit
• 🔥 http://gleg.net/vulndisco_meta.shtml · Exploit
• 🔥 http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz · Exploit
• 🔥 https://exploit-db.com/exploits/16389 · Exploit
• 🔥 https://exploit-db.com/exploits/2729 · Exploit
• 🔥 http://securityfocus.com/bid/20941 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5780 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30083 · Note
• http://securityfocus.com/archive/1/450728/100/0/threaded · Note
• http://securityreason.com/securityalert/1831 · Note
• http://securitytracker.com/id?1017172 · Note
• http://vupen.com/english/advisories/2006/4380 · Note
• http://secunia.com/advisories/22751 · Note