Sun Nfs vulnerabilities

4 CVEs affecting Sun Nfs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-0169, published 1997-07-01.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-0165, published 1997-03-01. High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. NFS cache poisoning.
• CVE-1999-0169, published 1997-07-01. High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. NFS allows attackers to read and write any file on the system by specifying a false UID.
• CVE-1999-0166, published 1997-01-01. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. NFS allows users to use a "cd .." command to access other directories besides the exported file system.
• CVE-1999-0084, published 1990-05-01. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.