Executive Summary

Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.

Why It Matters

CVE-2003-0252 is rated CRITICAL severity, requiring immediate attention from security teams.

CVSS Base Score: 9.8/10

Affected Technologies

Vendors: linux-nfs

Products: nfs-utils

🛡️What Defenders Should Check

Check if you are affected — Review your asset inventory for products listed in CVE-2003-0252.

Apply available patches — Visit vendor advisories for the latest security updates.

Monitor for exploitation — Check your SIEM/IDS logs for related indicators.

Use Vulnios to continuously monitor your exposure to CVE-2003-0252 and similar vulnerabilities.

References & Sources

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0023.html

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0024.html

http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt

http://marc.info/?l=bugtraq&m=105820223707191&w=2

http://marc.info/?l=bugtraq&m=105830921519513&w=2

http://marc.info/?l=bugtraq&m=105839032403325&w=2

http://secunia.com/advisories/9259

http://securitytracker.com/id?1007187

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001262.1-1

http://www.debian.org/security/2003/dsa-349

AI Security Advisor

Get AI-powered security recommendations tailored to this specific threat — including risk assessment, detection guidance, MITRE ATT&CK mapping, and actionable remediation steps.

Affected Products

nfs-utils

Sources

NVD / NIST

criticaldos

Protect Your Organization

Monitor CVEs, scan for vulnerabilities, and get real-time threat alerts — all in one platform.

Get Started Free Free Security Scan OSINT Dashboard

Get instant alerts on Telegram

Join our public channel for real-time critical CVE alerts.

Follow @vulnios

Critical Vulnerability: CVE-2003-0252 — linux-nfs — nfs-utils