## NFS UID Vulnerability

### Risk Factor: 8

### Machines Affected:

Most NFS running unpatched w/ 16-bit UID (Exception: Solaris - all UIDs are 32-bit)

### Description:

Normally many NFS implementations request that the UID presented to them are 16-bit UIDs (User IDs). However, if you present them with a 32-bit UID where the lower order (the numbers farthest to the right) bits are set to 0, the UID gets interpreted as root on the server with 16-bit UIDs.

### Consequences:

Any user with 32-bit UIDs where the lower numbers are set to 0 can read/write any files owned by root

### Fix:

Get patch #1095935 from Sun Patches

Links for advisories/more info