CVE-2013-4851

Name: CVE-2013-4851
Creator: NVD / NIST
Published: 2013-07-29T13:59:56.933+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.14%

Last modified Jun 16, 2026

CVE-2013-4851 is a vulnerability of currently unknown severity. The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests.. EPSS estimates a 2.14% chance of exploitation in the next 30 days.

Description

The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass file permissions on NFS filesystems via crafted requests.

Metrics

EPSS Probability

2.14%

79.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Freebsd	Freebsd	8.3
Freebsd	Freebsd	9.0
Freebsd	Freebsd	9.1

References

Timeline

Published: Jul 29, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-4851?

How severe is CVE-2013-4851?

Severity scoring for CVE-2013-4851 is pending analysis. The EPSS model estimates a 2.14% probability of exploitation in the next 30 days.

How do I fix CVE-2013-4851?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-4851?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST