CVE

Id
63213  
CVE No.
CVE-2013-3266  
Status
Candidate  
Description
The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by specifying a plain file instead of a directory.  
Phase
Assigned (20130423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
628727 63213 CVE-2013-3266 DEBIAN:DSA-2672  View
628728 63213 CVE-2013-3266 URL:http://www.debian.org/security/2013/dsa-2672  View
628729 63213 CVE-2013-3266 FREEBSD:FreeBSD-SA-13:05  View
628730 63213 CVE-2013-3266 URL:http://www.freebsd.org/security/advisories/FreeBSD-SA-13:05.nfsserver.asc  View
628731 63213 CVE-2013-3266 SECTRACK:1028491  View
628732 63213 CVE-2013-3266 URL:http://www.securitytracker.com/id/1028491  View
628733 63213 CVE-2013-3266 SECUNIA:53241  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30332 JVNDB-2012-006040 PAM 用 EMC RSA SecurID Authentication Agents におけるログイン資格情報を破られる脆弱性 PAM 用 EMC RSA SecurID Authentication Agents は、Agent コードベースの代わりに PAM 対応アプリケーションのコードベース内のログイン試行の最大数を適用するため、ログイン資格情報を破られる脆弱性が存在します。 CVE-2013-3271 63213 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006040.html  View