Two Fat Men, One Filesystem

Signedness

44CON 2025 · Day 2 · Main Track

NFS (Network File System) version 2 and 3 are older than most of the people attacking them, and yet they remain deployed across internal enterprise networks, embedded devices, and — perplexingly — tho

AI review

Directory traversal in NFS that should have been found in 1994, still unpatched on the latest OpenBSD in 2025, affecting 150,000+ internet-exposed servers — and Signedness brought the tooling, the crashes, the NAS vendor demos, and the root shell.

Watch on YouTube