Lucene search
HistoryDec 07, 2013 - 8:55 p.m.
CVE-2013-6410
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.01
Percentile
83.3%
nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file.
Affected configurations
Node
wouter_verhelstnbdRange≤3.4
ORwouter_verhelstnbdMatch2.7.5
ORwouter_verhelstnbdMatch2.8.0
ORwouter_verhelstnbdMatch2.8.2
ORwouter_verhelstnbdMatch2.8.4
ORwouter_verhelstnbdMatch2.8.5
ORwouter_verhelstnbdMatch2.8.6
ORwouter_verhelstnbdMatch2.8.7
ORwouter_verhelstnbdMatch2.9.0
ORwouter_verhelstnbdMatch2.9.1
ORwouter_verhelstnbdMatch2.9.2
ORwouter_verhelstnbdMatch2.9.3
ORwouter_verhelstnbdMatch2.9.4
ORwouter_verhelstnbdMatch2.9.5
ORwouter_verhelstnbdMatch2.9.6
ORwouter_verhelstnbdMatch2.9.7
ORwouter_verhelstnbdMatch2.9.8
ORwouter_verhelstnbdMatch2.9.9
ORwouter_verhelstnbdMatch2.9.10
ORwouter_verhelstnbdMatch2.9.11
ORwouter_verhelstnbdMatch2.9.12
ORwouter_verhelstnbdMatch2.9.13
ORwouter_verhelstnbdMatch2.9.14
ORwouter_verhelstnbdMatch2.9.15
ORwouter_verhelstnbdMatch2.9.16
ORwouter_verhelstnbdMatch2.9.17
ORwouter_verhelstnbdMatch2.9.18
ORwouter_verhelstnbdMatch2.9.19
ORwouter_verhelstnbdMatch2.9.20
ORwouter_verhelstnbdMatch2.9.21
ORwouter_verhelstnbdMatch2.9.22
ORwouter_verhelstnbdMatch2.9.23
ORwouter_verhelstnbdMatch2.9.24
ORwouter_verhelstnbdMatch2.9.25
ORwouter_verhelstnbdMatch3.0
ORwouter_verhelstnbdMatch3.1
ORwouter_verhelstnbdMatch3.1.1
ORwouter_verhelstnbdMatch3.2
ORwouter_verhelstnbdMatch3.3
Node
debiandebian_linuxMatch6.0
ORdebiandebian_linuxMatch7.0
Node
canonicalubuntu_linuxMatch12.04lts
ORcanonicalubuntu_linuxMatch14.04lts
ORcanonicalubuntu_linuxMatch14.10
ORcanonicalubuntu_linuxMatch15.04
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wouter_verhelst | nbd | * | cpe:2.3:a:wouter_verhelst:nbd:*:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.7.5 | cpe:2.3:a:wouter_verhelst:nbd:2.7.5:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.8.0 | cpe:2.3:a:wouter_verhelst:nbd:2.8.0:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.8.2 | cpe:2.3:a:wouter_verhelst:nbd:2.8.2:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.8.4 | cpe:2.3:a:wouter_verhelst:nbd:2.8.4:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.8.5 | cpe:2.3:a:wouter_verhelst:nbd:2.8.5:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.8.6 | cpe:2.3:a:wouter_verhelst:nbd:2.8.6:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.8.7 | cpe:2.3:a:wouter_verhelst:nbd:2.8.7:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.9.0 | cpe:2.3:a:wouter_verhelst:nbd:2.9.0:*:*:*:*:*:*:* |
| wouter_verhelst | nbd | 2.9.1 | cpe:2.3:a:wouter_verhelst:nbd:2.9.1:*:*:*:*:*:*:* |
Related
openvas
openvas
Fedora Update for nbd FEDORA-2013-22610
2013-12-17 00:00:00
Fedora Update for nbd FEDORA-2013-22607
2013-12-17 00:00:00
Fedora Update for nbd FEDORA-2013-22557
2014-02-03 00:00:00
cvelist
cvelist
CVE-2013-6410
2013-12-07 20:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: nbd-3.5-1.fc20
2013-12-14 03:36:12
[SECURITY] Fedora 18 Update: nbd-3.5-1.fc18
2013-12-12 02:59:24
[SECURITY] Fedora 19 Update: nbd-3.5-1.fc19
2013-12-12 02:51:32
ubuntucve
ubuntucve
CVE-2013-6410
2013-12-07 00:00:00
debiancve
debiancve
CVE-2013-6410
2013-12-07 20:55:02
prion
prion
Design/Logic Flaw
2013-12-07 20:55:00
nessus
nessus
Fedora 20 : nbd-3.5-1.fc20 (2013-22557)
2013-12-14 00:00:00
Fedora 19 : nbd-3.5-1.fc19 (2013-22610)
2013-12-12 00:00:00
Fedora 18 : nbd-3.5-1.fc18 (2013-22607)
2013-12-12 00:00:00
osv
osv
nbd - privilege escalation
2013-11-29 00:00:00
debian
debian
[BSA-089] Security update for nbd
2013-12-04 15:57:10
cve
cve
CVE-2013-6410
2013-12-07 20:55:02
ubuntu
ubuntu
NBD vulnerabilities
2015-07-22 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.01
Percentile
83.3%
Related for NVD:CVE-2013-6410