PT-2001-2305 · Freebsd · Freebsd

Publicado 2001-08-21 · Atualizado 2008-09-05 · CVE-2001-1166

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.3 and earlier

Description The issue concerns linprocfs on FreeBSD, which fails to properly restrict access to kernel memory. This allows a process with debugging rights on a privileged process to read restricted memory from that process.

Recommendations For versions 4.3 and earlier, update to a version later than 4.3 to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-1166

Produtos afetados

Freebsd

Referências · 5

• http://securityfocus.com/bid/3217 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1166 · Nota de Segurança
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:55.procfs.asc · Aviso do Fabricante
• http://osvdb.org/1938 · Nota
• http://iss.net/security_center/static/7017.php · Aviso do Fabricante