CVE-2010-2020 in FreeBSD

Sumário

de MITRE

sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 24/05/2010
• Divulgação: 28/05/2010
• Moderação: aceite
• Entrada: VDB-53401
• CPE: pronto
• CWE: CWE-20 (confirmado)
• Exploração: Descarregar
• CVSS: 6.9 (NVD)
• EPSS: 0.00867
• KEV: não
• Atividades: muito baixo
• Sector: Education, Hostingprovider, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-2020
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-2020
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-2020/