CVE-2011-1739

2011-05-0320:55:12

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.004

Percentile

73.4%

JSON

The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.

Affected configurations

Nvd

Node

freebsdfreebsdMatch7.4

freebsdfreebsdMatch8.0

freebsdfreebsdMatch8.1

freebsdfreebsdMatch8.2

VendorProductVersionCPE
freebsdfreebsd7.4cpe:2.3:o:freebsd:freebsd:7.4:*:*:*:*:*:*:*
freebsdfreebsd8.0cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*
freebsdfreebsd8.1cpe:2.3:o:freebsd:freebsd:8.1:*:*:*:*:*:*:*
freebsdfreebsd8.2cpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
freebsd	freebsd	7.4	cpe:2.3:o:freebsd:freebsd:7.4:::::::*
freebsd	freebsd	8.0	cpe:2.3:o:freebsd:freebsd:8.0:::::::*
freebsd	freebsd	8.1	cpe:2.3:o:freebsd:freebsd:8.1:::::::*
freebsd	freebsd	8.2	cpe:2.3:o:freebsd:freebsd:8.2:::::::*