PT-2011-3339 · Freebsd · Freebsd

Ruslan Ermilov · Published 2011-05-03 · Updated 2017-08-17 · CVE-2011-1739

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD versions 7.4 through 8.2

Description The issue arises from the makemask function in mountd.c, which does not correctly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8. This allows remote attackers to bypass intended access restrictions under certain circumstances via an NFS mount request.

Recommendations For FreeBSD versions 7.4 through 8.2, update to a version that includes a fix for the makemask function issue in mountd.c to prevent remote attackers from bypassing access restrictions.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1739

Affected Products

Freebsd

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-1739 · Security Note
• http://vupen.com/english/advisories/2011/1076 · Vendor Advisory
• http://secunia.com/advisories/44307 · Vendor Advisory
• http://security.freebsd.org/advisories/FreeBSD-SA-11:01.mountd.asc · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66981 · Note
• http://securitytracker.com/id?1025425 · Note
• http://securityfocus.com/bid/47517 · Note