CVE-2013-4851

Related Files

Debian Security Advisory 2743-1

Posted Aug 27, 2013

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2743-1 - Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak.

tags | advisory, kernel, vulnerability

systems | linux, freebsd, debian

advisories | CVE-2013-3077, CVE-2013-4851, CVE-2013-5209

SHA-256 | 569d8b0cda13d3a73e841bf15e6cefd040a645974771d3bc8fc7fc5adeea0929

Download | Favorite | View

FreeBSD Security Advisory - NFS Incorrect Privilege Validation

Posted Jul 29, 2013

Authored by Tim Zingelman, Christopher Key, Rick Macklem | Site security.freebsd.org

FreeBSD Security Advisory - The kernel incorrectly uses client supplied credentials instead of the one configured in exports(5) when filling out the anonymous credential for a NFS export, when -network or -host restrictions are used at the same time. The remote client may supply privileged credentials (e.g. the root user) when accessing a file under the NFS share, which will bypass the normal access checks.

tags | advisory, remote, kernel, root

systems | freebsd

advisories | CVE-2013-4851

SHA-256 | d672bbe3c1c06396c194b1f5062f4d67d79b24f02a60b7a89344ec0f57fe8219

Download | Favorite | View