CVE-2013-3266

Related Files

Debian Security Advisory 2672-1

Posted May 23, 2013

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2672-1 - Adam Nowacki discovered that the new FreeBSD NFS implementation processes a crafted READDIR request which instructs to operate a file system on a file node as if it were a directory node, leading to a kernel crash or potentially arbitrary code execution.

tags | advisory, arbitrary, kernel, code execution

systems | linux, freebsd, debian

advisories | CVE-2013-3266

SHA-256 | 8eabdee56b79c7299333824f4fec68170872a9111bb52fc743a14016b0ae8d10

Download | Favorite | View

FreeBSD Security Advisory - NFS Server Input Validation

Posted Apr 30, 2013

Site security.freebsd.org

FreeBSD Security Advisory - When processing READDIR requests, the NFS server does not check that it is in fact operating on a directory node. An attacker can use a specially modified NFS client to submit a READDIR request on a file, causing the underlying filesystem to interpret that file as a directory.

tags | advisory

systems | freebsd

advisories | CVE-2013-3266

SHA-256 | bdaaa4f57ae7233f6c31b6eae202bb3c0468403f3d7945ce9f1166ffc3299396

Download | Favorite | View