Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

Nbd was updated to fix a buffer overflow in the mainloop() function of nbd-server.c. This vulnerability can be exploited by remote attackers via long requests to execute arbitrary code. (CVE-2011-0530: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119))

The remote host is affected by the vulnerability described in GLSA-201206-35 (nbd: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in nbd. Please review the       CVE identifiers referenced below for details.
  Impact :

    nbd allows remote attackers to cause a denial of service (NULL pointer       dereference and crash) or the execution of arbitrary code.
  Workaround :

    There is no known workaround at this time.

It was discovered that NBD incorrectly handled certain long requests.
A remote attacker could use this flaw to cause NBD to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A buffer overflow in the mainloop function the nbd server could allow remote attackers to execute arbitrary code. (CVE-2011-0530)

It was discovered a regression of a buffer overflow (CVE-2005-3534 ) in NBD, the Network Block Device server, that could allow arbitrary code execution on the NBD server via a large request.

- Update to 2.9.20: fix CVE-2005-3534, BZ#673562

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75973	openSUSE Security Update : nbd (openSUSE-SU-2011:0193-2)	Nessus	SuSE Local Security Checks	high
75679	openSUSE Security Update : nbd (openSUSE-SU-2011:0193-2)	Nessus	SuSE Local Security Checks	high
75678	openSUSE Security Update : nbd (nbd-4031)	Nessus	SuSE Local Security Checks	high
59708	GLSA-201206-35 : nbd: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
57230	SuSE 10 Security Update : nbd (ZYPP Patch Number 7450)	Nessus	SuSE Local Security Checks	high
55282	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 : nbd vulnerability (USN-1155-1)	Nessus	Ubuntu Local Security Checks	high
53781	openSUSE Security Update : nbd (openSUSE-SU-2011:0193-2)	Nessus	SuSE Local Security Checks	high
53780	openSUSE Security Update : nbd (nbd-4031)	Nessus	SuSE Local Security Checks	high
53447	SuSE 10 Security Update : nbd (ZYPP Patch Number 7455)	Nessus	SuSE Local Security Checks	high
52550	Debian DSA-2183-1 : nbd - buffer overflow	Nessus	Debian Local Security Checks	high
51990	Fedora 14 : nbd-2.9.20-1.fc14 (2011-1108)	Nessus	Fedora Local Security Checks	high
51989	Fedora 13 : nbd-2.9.20-1.fc13 (2011-1097)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2011-0530

critical

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high