Ruslan Ermilov

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 7.4 through 8.2 **Description** The issue arises from the makemask function in mountd.c, which does not correctly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8. This allows remote attackers to bypass intended access restrictions under certain circumstances via an NFS mount request. **Recommendations** For FreeBSD versions 7.4 through 8.2, update to a version that includes a fix for the makemask function issue in mountd.c to prevent remote attackers from bypassing access restrictions.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 6.3 through 7.1 **Description** The issue is related to the arc4random function in the kernel, which lacks a proper entropy source for a short time period immediately after boot. This makes it easier for attackers to predict the function's return values, allowing them to conduct certain attacks against the GEOM framework and various network protocols. The problem is connected to the Yarrow random number generator. **Recommendations** For FreeBSD versions 6.3 through 7.1, consider implementing additional entropy sources to improve the randomness of the arc4random function until a patch is available. As a temporary workaround, restrict access to sensitive network protocols and the GEOM framework immediately after boot to minimize the risk of exploitation.