Lucene search

K
cvelistMitreCVELIST:CVE-2013-4851
HistoryJul 28, 2013 - 6:00 p.m.

CVE-2013-4851

2013-07-2818:00:00
mitre
raw.githubusercontent.com
2

6.2 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.1%

The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests.

6.2 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.1%