CVE-2011-1739 - Vulnerability Details - OpenCVE

The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00336.

Key SSVC decision points have not yet been added.

Vendors	Products
Freebsd	Freebsd

Configuration 1 [-]

OR	cpe:2.3:o:freebsd:freebsd:7.4:::::::*
	cpe:2.3:o:freebsd:freebsd:8.0:::::::*
	cpe:2.3:o:freebsd:freebsd:8.1:::::::*
	cpe:2.3:o:freebsd:freebsd:8.2:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2011-1738	The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/44307
http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc
http://securitytracker.com/id?1025425
http://www.securityfocus.com/bid/47517
http://www.vupen.com/english/advisories/2011/1076
https://exchange.xforce.ibmcloud.com/vulnerabilities/66981

History

No history.

MITRE

Status: PUBLISHED

Assigner: freebsd

Published: 2011-05-03T20:00:00

Updated: 2024-08-06T22:37:25.786Z

Reserved: 2011-04-19T00:00:00

Link: CVE-2011-1739

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2011-05-03T20:55:12.417

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-1739

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-04-20T00:00:00", "descriptions": [{"lang": "en", "value": "The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd"}, "references": [{"name": "ADV-2011-1076", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2011/1076"}, {"name": "FreeBSD-SA-11:01", "tags": ["vendor-advisory", "x_refsource_FREEBSD"], "url": "http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc"}, {"name": "47517", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/47517"}, {"name": "freebsd-mountd-security-bypass(66981)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66981"}, {"name": "1025425", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1025425"}, {"name": "44307", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/44307"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secteam@freebsd.org", "ID": "CVE-2011-1739", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2011-1076", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2011/1076"}, {"name": "FreeBSD-SA-11:01", "refsource": "FREEBSD", "url": "http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc"}, {"name": "47517", "refsource": "BID", "url": "http://www.securityfocus.com/bid/47517"}, {"name": "freebsd-mountd-security-bypass(66981)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66981"}, {"name": "1025425", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1025425"}, {"name": "44307", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/44307"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T22:37:25.786Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2011-1076", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2011/1076"}, {"name": "FreeBSD-SA-11:01", "tags": ["vendor-advisory", "x_refsource_FREEBSD", "x_transferred"], "url": "http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc"}, {"name": "47517", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/47517"}, {"name": "freebsd-mountd-security-bypass(66981)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66981"}, {"name": "1025425", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1025425"}, {"name": "44307", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/44307"}]}]}, "cveMetadata": {"assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "assignerShortName": "freebsd", "cveId": "CVE-2011-1739", "datePublished": "2011-05-03T20:00:00", "dateReserved": "2011-04-19T00:00:00", "dateUpdated": "2024-08-06T22:37:25.786Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:7.4:*:*:*:*:*:*:*", "matchCriteriaId": "0C94B745-BD27-423D-BBB6-A821CD9BC1C4", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "3CF1F9EF-01AF-4708-AE02-765360AF3D66", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "9899C87E-2C09-46AE-BC24-1ACF012784CA", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "DD5ECA1A-D9B4-4ED7-95EC-684E7AA2B765", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request."}, {"lang": "es", "value": "La funci\u00f3n makemask en mountd.c en mountd en FreeBSD v7.4 a v8.2 no controla correctamente el campo de una red, la especificaci\u00f3n de un bloque CIDR con una longitud de prefijo que no es un m\u00faltiplo entero de 8, lo que permite a atacantes remotos evitar las restricciones de acceso previsto en oportunistas circunstancias a trav\u00e9s de un montaje de petici\u00f3n NFS."}], "id": "CVE-2011-1739", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-05-03T20:55:12.417", "references": [{"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/44307"}, {"source": "secteam@freebsd.org", "url": "http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc"}, {"source": "secteam@freebsd.org", "url": "http://securitytracker.com/id?1025425"}, {"source": "secteam@freebsd.org", "url": "http://www.securityfocus.com/bid/47517"}, {"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/1076"}, {"source": "secteam@freebsd.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66981"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/44307"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1025425"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/47517"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/1076"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66981"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}