CVE-2013-4851 in FreeBSD
Summary
The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
07/16/2013
Disclosure
07/29/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9811 | FreeBSD NFS Server vfs_export.c vfs_hang_addrlist access control | 264 | Proof-of-Concept | Official fix | CVE-2013-4851 |