CVE-2003-0252

Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.

• CWE-193

• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.htmlBroken Link, Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.htmlBroken Link, Vendor Advisory
• http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txtExploit, Third Party Advisory
• http://marc.info/?l=bugtraq&m=105820223707191&w=2Exploit, Mailing List
• http://marc.info/?l=bugtraq&m=105830921519513&w=2Mailing List, Patch
• http://marc.info/?l=bugtraq&m=105839032403325&w=2Mailing List
• http://secunia.com/advisories/9259Broken Link
• http://securitytracker.com/id?1007187Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1Broken Link
• http://www.debian.org/security/2003/dsa-349Broken Link
• http://www.kb.cert.org/vuls/id/258564Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:076Third Party Advisory
• http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2003-206.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2003-207.htmlBroken Link
• http://www.securityfocus.com/bid/8179Broken Link, Third Party Advisory, VDB Entry
• http://www.turbolinux.com/security/TLSA-2003-44.txtBroken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12600Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443Broken Link
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.htmlBroken Link, Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.htmlBroken Link, Vendor Advisory
• http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txtExploit, Third Party Advisory
• http://marc.info/?l=bugtraq&m=105820223707191&w=2Exploit, Mailing List
• http://marc.info/?l=bugtraq&m=105830921519513&w=2Mailing List, Patch
• http://marc.info/?l=bugtraq&m=105839032403325&w=2Mailing List
• http://secunia.com/advisories/9259Broken Link
• http://securitytracker.com/id?1007187Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1Broken Link
• http://www.debian.org/security/2003/dsa-349Broken Link
• http://www.kb.cert.org/vuls/id/258564Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:076Third Party Advisory
• http://www.novell.com/linux/security/advisories/2003_031_nfs_utils.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2003-206.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2003-207.htmlBroken Link
• http://www.securityfocus.com/bid/8179Broken Link, Third Party Advisory, VDB Entry
• http://www.turbolinux.com/security/TLSA-2003-44.txtBroken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12600Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A443Broken Link

Published

Aug 18, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0245Vulnerability in the apr_psprintf function in the Apache Por…
• CVE-2003-0246The ioperm system call in Linux kernel 2.4.20 and earlier do…
• CVE-2003-0247Unknown vulnerability in the TTY layer of the Linux kernel 2…
• CVE-2003-0248The mxcsr code in Linux kernel 2.4 allows attackers to modif…
• CVE-2003-0249PHP treats unknown methods such as "PoSt" as a GET request, …
• CVE-2003-0251ypserv NIS server before 2.7 allows remote attackers to caus…
• CVE-2003-0253The prefork MPM in Apache 2 before 2.0.47 does not properly …
• CVE-2003-0254Apache 2 before 2.0.47, when running on an IPv6 host, allows…
• CVE-2003-0255The key validation code in GnuPG before 1.2.2 does not prope…
• CVE-2003-0256The GnuPG plugin in kopete before 0.6.2 does not properly cl…
• CVE-2003-0257Format string vulnerability in the printer capability for IB…
• CVE-2003-0258Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardw…