CVE-2011-1739

Published May 3, 2011

Last updated 7 years ago

Overview

Description: The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.
Source: secteam@freebsd.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:7.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C94B745-BD27-423D-BBB6-A821CD9BC1C4"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3CF1F9EF-01AF-4708-AE02-765360AF3D66"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:8.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9899C87E-2C09-46AE-BC24-1ACF012784CA"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD5ECA1A-D9B4-4ED7-95EC-684E7AA2B765"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References