CVE-2010-2020

FreeBSD 8.0/7.3/7.2 - 'nfs_mount()' Local Privilege Escalation

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2010-2020 has a selected CVSS score of 6.9; EIP currently links 2 catalogued exploits.

Description

sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBFreeBSD 8.0/7.3/7.2 - 'nfs_mount()' Local Privilege EscalationExploitDB exploitby Patroklos ArgyroudisNot analyzed1 file
ExploitDB
PoC details
ExploitDBFreeBSD - 'mountnfs()' Denial of ServiceExploitDB exploitby Patroklos ArgyroudisNot analyzed1 file
ExploitDB
PoC details

References

5