CVEvulnerability

CVE-2013-6410

7.5 HIGH Published 2013-12-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-12-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file.

Affected configurations

• wouter verhelst nbd (<= 3.4) • wouter verhelst nbd 2.7.5 • wouter verhelst nbd 2.8.0 • wouter verhelst nbd 2.8.2 • wouter verhelst nbd 2.8.4 • wouter verhelst nbd 2.8.5 • wouter verhelst nbd 2.8.6 • wouter verhelst nbd 2.8.7 • wouter verhelst nbd 2.9.0 • wouter verhelst nbd 2.9.1 • wouter verhelst nbd 2.9.2 • wouter verhelst nbd 2.9.3 • wouter verhelst nbd 2.9.4 • wouter verhelst nbd 2.9.5 • wouter verhelst nbd 2.9.6 • wouter verhelst nbd 2.9.7 • wouter verhelst nbd 2.9.8 • wouter verhelst nbd 2.9.9 • wouter verhelst nbd 2.9.10 • wouter verhelst nbd 2.9.11 • wouter verhelst nbd 2.9.12 • wouter verhelst nbd 2.9.13 • wouter verhelst nbd 2.9.14 • wouter verhelst nbd 2.9.15 • wouter verhelst nbd 2.9.16 • wouter verhelst nbd 2.9.17 • wouter verhelst nbd 2.9.18 • wouter verhelst nbd 2.9.19 • wouter verhelst nbd 2.9.20 • wouter verhelst nbd 2.9.21 • wouter verhelst nbd 2.9.22 • wouter verhelst nbd 2.9.23 • wouter verhelst nbd 2.9.24 • wouter verhelst nbd 2.9.25 • wouter verhelst nbd 3.0 • wouter verhelst nbd 3.1 • wouter verhelst nbd 3.1.1 • wouter verhelst nbd 3.2 • wouter verhelst nbd 3.3 • debian debian linux 6.0 • debian debian linux 7.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 14.10 • canonical ubuntu linux 15.04

Related

Weakness · not in database (1)

References