Bugtraq mailing list archives

Re: nfsbug, bugs


From: newsham () aloha net (Timothy Newsham)
Date: Sun, 5 Feb 1995 18:26:14 -1000 (HST)


The nfsbug program guessed this file handle for my system, how do I protect 
against someone using it, and how do I make use of this information?
 GUESSABLE FILE HANDLE 129.186.109.1: (7,6) ufs <0,2,907605096> <0,2,907605

The best you can do is get a non-broken fsirand and rerun it on
your system.  This will randomize the numbers nfs uses for file handles.
After doing this any system currently accessing filesystems exported
from your host will have to remount to get valid file handles.

How can you use the filehandle?  You could stick it in a variable
and pass it off to nfs to request operations be done on the file
associated with the handle.

 UID .. BUG: 129.186.109.1:<unknown>
Is this the nobody - truncate - root bug? 

Yup.  32 bit uids in requests get truncated to 15 bits after doing
the root->nobody translation.  This lets you be root over the
mount even when nfs remaps the root uid.

Martha Lanatte                                        martha () sol nstl gov
System Administrator               National Soil Tilth Laboratories



Current thread: