NVD

Id
13511  
Name
CVE-2010-2020  
Description
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-05-28  
Modified Date
2012-11-05  
Seq
2010-2020  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74587 13511 CVE-2010-2020 FreeBSD-SA-10:06  View
74588 13511 CVE-2010-2020 1024039  View
74589 13511 CVE-2010-2020 14002  View
74590 13511 CVE-2010-2020 14003  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38310 JVNDB-2010-004095 FreeBSD のカーネルの NFS クライアントにおける権限を取得される脆弱性 FreeBSD のカーネルの NFS クライアントの sys/nfsclient/nfs_vfsops.c は、vfs.usermount が有効になっている際、特定の fhsize パラメータの長さを検証しないため、権限を取得される脆弱性が存在します。 CVE-2010-2020 44600 CVE-2010-2020 13511 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004095.html 2010-05-27 2012-06-26 View