VULNERABILITY INTELLIGENCE

CVE-2011-1739

CVSS score4.3 MEDIUM
EPSS probability1.28%
CISA KEVNot currently listed
Published2011-05-03
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references