CVE-2004-0154
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of...
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
Exploit likelihood
What each source reports
NVD Score used
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
- Record
CVE-2004-0154- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
- Record
CVE-2004-0154- Updated
- 2026-11-02
EUVDEUVD-2004-0154 No score
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
- Record
EUVD-2004-0154- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-94fh-jw32-7fj9 No score
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of...
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
- Record
GHSA-94fh-jw32-7fj9- Updated
- 2026-11-02
OSV No score
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
- Record
CVE-2004-0154- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0154 No score
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
- Record
DEBIAN-CVE-2004-0154- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nfs-utilsDebian:12 |
before 1:1.0.5-3 | 1:1.0.5-3 |
nfs-utilsDebian:13 |
before 1:1.0.5-3 | 1:1.0.5-3 |
nfs-utilsDebian:14 |
before 1:1.0.5-3 | 1:1.0.5-3 |
nfs-utilsRed Hat:enterprise_linux:3::as |
before 0:1.0.6-7.EL | 0:1.0.6-7.EL |
nfs-utilsRed Hat:enterprise_linux:3::desktop |
before 0:1.0.6-7.EL | 0:1.0.6-7.EL |
nfs-utilsRed Hat:enterprise_linux:3::es |
before 0:1.0.6-7.EL | 0:1.0.6-7.EL |
nfs-utilsRed Hat:enterprise_linux:3::ws |
before 0:1.0.6-7.EL | 0:1.0.6-7.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0154 is a medium vulnerability (CVSS 5.0) in Nfs Nfs-utils, published May 12, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.73%, the 77th percentile. Fixed in nfs-utils 1:1.0.5-3.
References
trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673
exchange.xforce.ibmcloud.com/vulnerabilities/15418
securityfocus.com/bid/9813
bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535
Show 12 moreShow less
redhat.com/support/errata/RHSA-2004-072.html
nvd.nist.gov/vuln/detail/CVE-2004-0154
github.com/advisories/GHSA-94fh-jw32-7fj9
security-tracker.debian.org/tracker/CVE-2004-0154
access.redhat.com/errata/RHSA-2004:072
kernel.org/pub/linux/utils/nfs/ChangeLog-nfs-utils-1.0.6
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_072.json
cve.org/CVERecord?id=CVE-2004-0154