Vulnerability in Freebsd
CVE-2013-5710
The nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users with certain permissions to bypass access restrictions via a hardlink in a nullfs instance to a file in a different instance.
EPSS: 0.003 (21.7th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 8.0, 8.3, 8.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)