Back to Database
Status published
High
CVE-2013-6410
nbd-server in Network Block Device (nbd) before 3.5 does not...
Vulnerability Description
nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6410
Credits & Attribution
No credits recorded in the NVD database.
References
More from wouter verhelst
View All →CVE-2013-7441
The modern style negotiation in Network Block Device (nbd-server) 2.9.22...
High
7.8
CVE-2011-1925
nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers...
Medium
5
CVE-2011-0530
Buffer overflow in the mainloop function in nbd-server.c in the...
High
7.5
CVE-2005-3534
Buffer overflow in the Network Block Device (nbd) server 2.7.5...
High
7.5
Affected Vendor
wouter verhelst
View all reports →Affected Software
nbd, debian linux, ubuntu linux
Vulnerable Versions:
0, 2.7.5, 2.8.0, 2.8.2, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.9.0, 2.9.1, 2.9.2, 2.9.3, 2.9.4, 2.9.5, 2.9.6, 2.9.7, 2.9.8, 2.9.9, 2.9.10, 2.9.11, 2.9.12, 2.9.13, 2.9.14, 2.9.15, 2.9.16, 2.9.17, 2.9.18, 2.9.19, 2.9.20, 2.9.21, 2.9.22, 2.9.23, 2.9.24, 2.9.25, 3.0, 3.1, 3.1.1, 3.2, 3.3, 6.0, 7.0, 12.04, 14.04, 14.10, 15.04
Timeline
Official Publish:
December 7th, 2013
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.