Executive brief
LabF nfsAxe is a software suite used for NFS (Network File System) connectivity between Windows and Unix systems. A security flaw in its Ping Client component allows a local user to execute unauthorized commands on the computer. By entering a specially crafted string into the 'Host IP' field, an attacker could take full control of the system or disrupt operations.
Technical details
A classic stack-based buffer overflow (CWE-120) exists in the Ping Client (ping.exe) of LabF nfsAxe version 3.7. The vulnerability is triggered when a user provides an overly long string in the 'Host IP' input field. An attacker can exploit this by crafting a malicious payload that overwrites the return address on the stack, leading to arbitrary code execution with the privileges of the application. While the attack requires local access to the application's interface, it does not require prior authentication or complex user interaction beyond inputting the payload. Public exploit code demonstrating the execution of calc.exe via a direct return overwrite is available.
Affected products
- LabF nfsAxe 3.7
Timeline
- 2019-04-20: disclosed: Initial exploit code authored by Dino Covotsos
- 2026-06-04: advisory: CVE published and added to NVD dataset