CVE-2013-6410

nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file.

• CWE-264

• http://sourceforge.net/mailarchive/forum.php?thread_name=529BAA58.2080401%40uter.be&forum_name=nbd-generalPatch
• http://www.debian.org/security/2013/dsa-2806Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/11/29/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/64002
• http://www.ubuntu.com/usn/USN-2676-1Third Party Advisory
• http://sourceforge.net/mailarchive/forum.php?thread_name=529BAA58.2080401%40uter.be&forum_name=nbd-generalPatch
• http://www.debian.org/security/2013/dsa-2806Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/11/29/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/64002
• http://www.ubuntu.com/usn/USN-2676-1Third Party Advisory

Published

Dec 7, 2013

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6404Quassel core (server daemon) in Quassel IRC before 0.9.2 doe…
• CVE-2013-6405Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-6406Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6407The UpdateRequestHandler for XML in Apache Solr before 4.1 a…
• CVE-2013-6408The DocumentAnalysisRequestHandler in Apache Solr before 4.3…
• CVE-2013-6409Debian adequate before 0.8.1, when run by root with the --us…
• CVE-2013-6411The HandleCrashedAircraft function in aircraft_cmd.cpp in Op…
• CVE-2013-6412The transform_save function in transform.c in Augeas 1.0.0 t…
• CVE-2013-6413Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2…
• CVE-2013-6414actionpack/lib/action_view/lookup_context.rb in Action View …
• CVE-2013-6415Cross-site scripting (XSS) vulnerability in the number_to_cu…
• CVE-2013-6416Cross-site scripting (XSS) vulnerability in the simple_forma…