CVE-2013-4851: Medium severity freebsd kernel vulnerability

Published Jul 28, 2013

Updated

The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests.

Affected Software

5 affected components

FreeBSD FreeBSD=8.3

FreeBSD FreeBSD=9.0

FreeBSD FreeBSD=9.1

FreeBSD FreeBSD=9.1-p4

FreeBSD FreeBSD=9.1-p5

Event History

Jul 28, 2013

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4851?

CVE-2013-4851 has a moderate severity rating due to the potential for unauthorized access to files based on group information.

How do I fix CVE-2013-4851?

To fix CVE-2013-4851, upgrade to FreeBSD versions 9.1-RELEASE-p6 or later and apply any relevant patches.

What systems are affected by CVE-2013-4851?

CVE-2013-4851 affects FreeBSD versions 8.3, 9.0, and 9.1 through 9.1-RELEASE-p5.

Who can exploit CVE-2013-4851?

Remote attackers can exploit CVE-2013-4851 to bypass file system export restrictions.

What component is vulnerable in CVE-2013-4851?

The vulnerability exists in the NFS server implementation within the vfs_hang_addrlist function in the FreeBSD kernel.