## NFS Export Vulnerability

### Risk Factor: 8

### Machines Affected:

Most UNIXes running misconfigured versions of NFS

### Description:

Along the same lines as the NFS Options vulnerability, this is due to a misconfigured NFS client. NFS allows anyone to mount the exports. From this point one can try using UID, mknod, or the "cd" bug to gain access. Also, writable file such as .rhosts, .profile, .login, .cshrc, & .netrc can allow an intruder to gain access to the system.

### Consequences:

Allows a user to gain access to the system that is exported by mounting the drive and making changes to certain files.

### Fix:

Export files READ-ONLY
(See fixes on the NFS Options bug)

Links for advisories/more info