NetSight
IP …
high7.5

CVE-2013-6410

nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrict…

Impact

nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file.

Affected products

VendorProductAffected versions
Wouter VerhelstNbd
through 3.4
Versions 2.7.5, 2.8.0, 2.8.2, 2.8.4, 2.8.5
DebianDebian Linux
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10, 15.04

Weakness classification

CWE-264

References