[BSA-089] Security update for nbd

2013-12-0415:57:10

lists.debian.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.01

Percentile

83.3%

JSON

Wouter Verhelst uploaded new packages for nbd which fixed the
following security problems:

CVE-2013-6410
Incorrect parsing of the access control lists

For the squeeze-backports distribution the problem has been fixed in
version 1:3.2-4~deb7u4~bpo60+1

nbd is not present in any other backports repository.

This end should point toward the ground if you want to go to space.

If it starts pointing toward space you are having a bad problem and you
will not go to space today.

– http://xkcd.com/1133/

OSVersionArchitecturePackageVersionFilename
Debian7s390xnbd-client< 1:3.2-4~deb7u4nbd-client_1:3.2-4~deb7u4_s390x.deb
Debian6s390nbd-client< 1:2.9.16-8+squeeze1nbd-client_1:2.9.16-8+squeeze1_s390.deb
Debian7i386nbd-client-udeb< 1:3.2-4~deb7u4nbd-client-udeb_1:3.2-4~deb7u4_i386.deb
Debian6sparcnbd-server< 1:2.9.16-8+squeeze1nbd-server_1:2.9.16-8+squeeze1_sparc.deb
Debian7mipsnbd-client< 1:3.2-4~deb7u4nbd-client_1:3.2-4~deb7u4_mips.deb
Debian7sparcnbd-server< 1:3.2-4~deb7u4nbd-server_1:3.2-4~deb7u4_sparc.deb
Debian6i386nbd-server< 1:2.9.16-8+squeeze1nbd-server_1:2.9.16-8+squeeze1_i386.deb
Debian7armelnbd-client-udeb< 1:3.2-4~deb7u4nbd-client-udeb_1:3.2-4~deb7u4_armel.deb
Debian6mipselnbd-client< 1:2.9.16-8+squeeze1nbd-client_1:2.9.16-8+squeeze1_mipsel.deb
Debian7amd64nbd-client-udeb< 1:3.2-4~deb7u4nbd-client-udeb_1:3.2-4~deb7u4_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	s390x	nbd-client	< 1:3.2-4~deb7u4	nbd-client_1:3.2-4~deb7u4_s390x.deb
Debian	6	s390	nbd-client	< 1:2.9.16-8+squeeze1	nbd-client_1:2.9.16-8+squeeze1_s390.deb
Debian	7	i386	nbd-client-udeb	< 1:3.2-4~deb7u4	nbd-client-udeb_1:3.2-4~deb7u4_i386.deb
Debian	6	sparc	nbd-server	< 1:2.9.16-8+squeeze1	nbd-server_1:2.9.16-8+squeeze1_sparc.deb
Debian	7	mips	nbd-client	< 1:3.2-4~deb7u4	nbd-client_1:3.2-4~deb7u4_mips.deb
Debian	7	sparc	nbd-server	< 1:3.2-4~deb7u4	nbd-server_1:3.2-4~deb7u4_sparc.deb
Debian	6	i386	nbd-server	< 1:2.9.16-8+squeeze1	nbd-server_1:2.9.16-8+squeeze1_i386.deb
Debian	7	armel	nbd-client-udeb	< 1:3.2-4~deb7u4	nbd-client-udeb_1:3.2-4~deb7u4_armel.deb
Debian	6	mipsel	nbd-client	< 1:2.9.16-8+squeeze1	nbd-client_1:2.9.16-8+squeeze1_mipsel.deb
Debian	7	amd64	nbd-client-udeb	< 1:3.2-4~deb7u4	nbd-client-udeb_1:3.2-4~deb7u4_amd64.deb