What’s Vulnerable › Vulnerabilities

CVE-2004-1014

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-01-10 · updated 2026-06-16

Description

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.

Affected products

• Debian Linux: 3.0
• Mandrakesoft Mandrake Linux: 9.2, 10.0, 10.1
• Mandrakesoft Mandrake Linux Corporate Server: 2.1
• Nfs-Utils: 1.0.6
• Red Hat Enterprise Linux: 3.0
• RedHat Enterprise Linux Desktop: 3.0

References

• http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup
• http://www.debian.org/security/2004/dsa-606
• http://www.redhat.com/support/errata/RHSA-2004-583.html
• http://www.redhat.com/support/errata/RHSA-2005-014.html
• http://www.securityfocus.com/archive/1/426072/30/6740/threaded
• http://www.securityfocus.com/bid/11785
• http://www.trustix.org/errata/2004/0065/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18332
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10899
• https://www.ubuntu.com/usn/usn-36-1/
• http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup
• http://www.debian.org/security/2004/dsa-606

Get alerted when CVE-2004-1014 or the next vulnerability affects your stack