File transfer & sharingTCP/UDP 2049 Cleartext by default
Port 2049: NFS
Network File System
Unix and Linux file sharing.
How attackers abuse it
- Exports open to any host, readable or writable.
- no_root_squash letting a remote root user act as root on the share.
How to defend it
- Export only to specific hosts; keep root_squash.
- Use NFSv4 with Kerberos for authentication and encryption.
Exam tip
A world-writable NFS export with no_root_squash is a classic privilege-escalation path.