CVE-2013-4851 Auth bypass in n/a
Remote attackers can bypass NFS file permissions by sending crafted requests with spoofed group information, allowing unauthorized access to exported filesystems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-4851?
CVE-2013-4851 is a medium-severity authentication bypass vulnerability in Freebsd Freebsd, published on 28 Jul 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests.
Weakness: CWE-264
Which versions are affected by CVE-2013-4851?
It affects 1 product.
Products include Freebsd Freebsd.
How do I fix CVE-2013-4851?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2013-4851 being exploited?
There is no known exploitation of CVE-2013-4851 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-vvfw-vgqq-f739.