Description
The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.
References
- ADV-2011-1076 vdb-entry
- FreeBSD-SA-11:01 vendor-advisory
- 47517 vdb-entry
- freebsd-mountd-security-bypass(66981) vdb-entry
- 1025425 vdb-entry
- 44307 third-party-advisory