PT-2004-1316 · Freebsd · Freebsd

Publicado 2004-06-23 · Atualizado 2017-07-11 · CVE-2004-0125

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 4.10-RELEASE

Description The issue concerns the jail system call in FreeBSD, which fails to verify the origin of attempts to manipulate routing tables. This could allow local users to modify the routing table.

Recommendations For versions prior to 4.10-RELEASE, update to version 4.10-RELEASE or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0125

Produtos afetados

Freebsd

Referências · 4

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc · Aviso do Fabricante
• http://securityfocus.com/bid/10485 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16342 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0125 · Nota de Segurança