Vulnerability nfs (2049/udp)
Synopsis :
It is possible to access the remote NFS shares without having root privileges.
Description :
Some of the NFS shares exported by the remote server could be
mounted by the scanning host. An attacker may exploit this problem
to gain read (and possibly write) access to files on remote host.
Note that root privileges were not required to mount the remote shares. That is,
the source port to mount the shares was bigger than 1024.
Solution :
Configure NFS on the remote host so that only authorized hosts can mount
the remote shares.
The remote NFS server should prevent mount requests originating from a non-privileged port.
Risk factor :
之前我有在幫公家機關做弱點掃描時,也遇到這樣狀況,基本上他們資訊室要看到的是那個結果,所以呢我的做法就是先將印表機及共用的資料夾都先取消共用,然後去做弱點掃描偵測,這樣描結果就會正常,不會出現警告的弱點,然後我走後他們看到我把分享的關掉就會自己在去把他打開,所以呢上有政策下有對策....