CVE

Id
49651  
CVE No.
CVE-2011-1739  
Status
Candidate  
Description
The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
539122 49651 CVE-2011-1739 FREEBSD:FreeBSD-SA-11:01  View
539123 49651 CVE-2011-1739 URL:http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc  View
539124 49651 CVE-2011-1739 BID:47517  View
539125 49651 CVE-2011-1739 URL:http://www.securityfocus.com/bid/47517  View
539126 49651 CVE-2011-1739 SECTRACK:1025425  View
539127 49651 CVE-2011-1739 URL:http://securitytracker.com/id?1025425  View
539128 49651 CVE-2011-1739 SECUNIA:44307  View
539129 49651 CVE-2011-1739 URL:http://secunia.com/advisories/44307  View
539130 49651 CVE-2011-1739 VUPEN:ADV-2011-1076  View
539131 49651 CVE-2011-1739 URL:http://www.vupen.com/english/advisories/2011/1076  View
539132 49651 CVE-2011-1739 XF:freebsd-mountd-security-bypass(66981)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34295 JVNDB-2011-004537 EMC Captiva eInput におけるサービス運用妨害の脆弱性 EMC Captiva eInput は、ActiveX 関数への呼び出し元を制限しないため、任意のファイルを読み込まれる、またはサービス運用妨害状態となる脆弱性が存在します。 CVE-2011-1744 49651 5.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004537.html  View