CVE-2003-0252: linux-nfs nfs-utils Off-by-one Error

EPSS trend

Probability

15.78%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 15.78% on 18-09-2026

18-09-202618-10-2026

EPSS score

15.78%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (isec.pl)
Maturity: unknown
referenceUnverified
Exploit Reference (marc.info)
Maturity: unknown

References

20 links

sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.redhat.com/support/errata/RHSA-2003-206.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.securityfocus.com/bid/8179VDB EntryX Refsource BIDBroken LinkThird Party Advisory
marc.info?l=bugtraq&m=105839032403325&w=2Mailing ListX Refsource BUGTRAQ
isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txtX Refsource MISCExploitThird Party Advisory
www.turbolinux.com/security/TLSA-2003-44.txtVendor AdvisoryX Refsource TURBOBroken Link
www.redhat.com/support/errata/RHSA-2003-207.htmlVendor AdvisoryX Refsource REDHATBroken Link
marc.info?l=bugtraq&m=105820223707191&w=2Mailing ListX Refsource BUGTRAQExploit
securitytracker.com/id?1007187VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.htmlMailing ListX Refsource VULNWATCHBroken LinkVendor Advisory

Show all 20 references

www.mandriva.com/security/advisories?name=MDKSA-2003:076Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory
archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.htmlMailing ListX Refsource VULNWATCHBroken LinkVendor Advisory
marc.info?l=bugtraq&m=105830921519513&w=2Mailing ListX Refsource BUGTRAQPatch
secunia.com/advisories/9259Third Party AdvisoryX Refsource SECUNIABroken Link
exchange.xforce.ibmcloud.com/vulnerabilities/12600VDB EntryX Refsource XFThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443VDB EntrySignatureX Refsource OVALBroken Link
www.kb.cert.org/vuls/id/258564Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.novell.com/linux/security/advisories/2003_031_nfs_utils.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.debian.org/security/2003/dsa-349Vendor AdvisoryX Refsource DEBIANBroken Link
security-tracker.debian.org/tracker/CVE-2003-0252Advisory

Related vulnerabilities

CVE-2013-1923debiannfs-utils+41.04%12y ago21-01-2014 18:00rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.CVE-2025-12801debiannfs-utils+1900.47%7mo ago04-03-2026 15:25A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.CVE-2011-2500debiannfs-utils+22.56%12y ago15-02-2014 11:00The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.CVE-2011-1749debiannfs-utils+40.35%12y ago26-02-2014 15:00The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.CVE-2019-3689debiannfs-utils+291.52%7y ago19-09-2019 13:27The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.

All vulnerabilities innfs-utils

CVE-2003-0252: linux-nfs nfs-utils Off-by-one Error

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References