NFS Service

Risk Level: Low risk vulnerability  Low

Check or Attack Name: nfsd

Platforms: Any
Description:

The NFS service was found. Security of NFS relies heavily upon who is allowed to mount the volumes that a server exports, and whether or not they are exported read-only. Improperly configured access permissions on exported volumes can permit an attacker to gain access to critical files.

Remedy:

Unix: Check permissions on exported volumes.

Windows: Set permissions to allow access only to approved users:

  1. Open the Server Manager. From the Windows NT Start menu, select Programs, Administrative Tools (Common), Server Manager.
  2. Select the server.
  3. From the Computer menu, select Shared Directories.
  4. Set permissions to allow access only to approved users.
References:

X-Force Logo
Know Your Risks