freebsd freebsd 4.2 vulnerabilities and exploits

(subscribe to this query)

pkg_add in FreeBSD 4.2 up to and including 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation.

Freebsd Freebsd 4.4 Freebsd Freebsd 4.2 Freebsd Freebsd 4.3

rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and cr...

Freebsd Freebsd 4.2 Freebsd Freebsd 4.3

inetd ident server in FreeBSD 4.x and previous versions does not properly set group permissions, which allows remote malicious users to read the first 16 bytes of files that are accessible by the wheel group.

Freebsd Freebsd 3.5.1 Freebsd Freebsd 4.1.1 Freebsd Freebsd 4.2 Freebsd Freebsd 3.5

linprocfs on FreeBSD 4.3 and previous versions does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.

Freebsd Freebsd 4.3 Freebsd Freebsd 4.1 Freebsd Freebsd 4.0 Freebsd Freebsd 4.2

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.

Freebsd Freebsd 4.0 Freebsd Freebsd 4.1 Freebsd Freebsd 4.2 Freebsd Freebsd 4.3

procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains acces...

Freebsd Freebsd 3.5.1 Freebsd Freebsd 4.1 Freebsd Freebsd 4.1.1 Freebsd Freebsd 4.2

procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which causes the kernel to hang.

Freebsd Freebsd 3.5.1 Freebsd Freebsd 4.1 Freebsd Freebsd 4.1.1 Freebsd Freebsd 4.2

procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges.

Freebsd Freebsd 3.5.1 Freebsd Freebsd 4.2 Freebsd Freebsd 4.1 Freebsd Freebsd 4.1.1

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and previous versions, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.

Freebsd Freebsd 4.5 Freebsd Freebsd 4.6 Freebsd Freebsd 4.2 Freebsd Freebsd 4.3 Freebsd Freebsd 4.4

4 EDB exploits

procfs on FreeBSD prior to 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to.

Freebsd Freebsd 4.2 Freebsd Freebsd 4.3 Freebsd Freebsd 4.4 Freebsd Freebsd 4.5 Freebsd Freebsd 4.1 Freebsd Freebsd 4.1.1

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook