PT-2005-5037 · Freebsd+3 · Freebsd+3

Publicado 2005-12-31 · Atualizado 2017-07-20 · CVE-2005-4351

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 7.0 and earlier OpenBSD versions up to 3.8 DragonFly versions up to 1.2 Linux versions up to 2.6.15

Description The securelevels implementation allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.

Recommendations For FreeBSD versions 7.0 and earlier, consider upgrading to a version later than 7.0 to resolve the issue. For OpenBSD versions up to 3.8, consider upgrading to a version later than 3.8 to resolve the issue. For DragonFly versions up to 1.2, consider upgrading to a version later than 1.2 to resolve the issue. For Linux versions up to 2.6.15, consider upgrading to a version later than 2.6.15 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-4351

Produtos afetados

Dragonfly

Freebsd

Linux

Openbsd

Referências · 6

• 🔥 http://redteam-pentesting.de/advisories/rt-sa-2005-015.txt · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4351 · Nota de Segurança
• http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html · Nota
• http://redteam-pentesting.de/advisories/rt-sa-2005-15.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24037 · Nota