media.ccc.de | MRMCD2024 Network File System Security @mediacccde | Uploaded October 2024 | Updated October 2024, 1 week ago.
media.ccc.de/v/2024-343-network-file-system-security
The Network File System was developed by Sun and its protocol version 2 was published to the public in 1989. The assumptions about networks date back to the same era. Still, it is widely used in corporate networks or universities. It is a scalable way to implement network shares, especially in Unix/Linux environments it is often used to mount home directories across large IT landscapes. While there are ways to implement encryption and access controls in a (more) secure manner with Kerberos, many enterprises do not. Furthermore, most operators do not understand the security model of the NFS protocol. In this talk we will talk about the security misconceptions of NFS and how to exploit them.
Sergej Schmidt
talks.mrmcd.net/2024/talk/7RR38D
#mrmcd24
creativecommons.org/licenses/by-sa/4.0
media.ccc.de/v/2024-343-network-file-system-security
The Network File System was developed by Sun and its protocol version 2 was published to the public in 1989. The assumptions about networks date back to the same era. Still, it is widely used in corporate networks or universities. It is a scalable way to implement network shares, especially in Unix/Linux environments it is often used to mount home directories across large IT landscapes. While there are ways to implement encryption and access controls in a (more) secure manner with Kerberos, many enterprises do not. Furthermore, most operators do not understand the security model of the NFS protocol. In this talk we will talk about the security misconceptions of NFS and how to exploit them.
Sergej Schmidt
talks.mrmcd.net/2024/talk/7RR38D
#mrmcd24
creativecommons.org/licenses/by-sa/4.0
