PT-2013-3575 · Freebsd · Freebsd

Alan Cox + 1 · Publicado 2013-07-02 · Atualizado 2019-03-18 · CVE-2013-2171

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.0 through 9.1-RELEASE-p4

Description The issue concerns the vm map lookup function in the kernel's mmap implementation, which fails to properly determine whether a task should have write access to a memory location. This allows local users to bypass filesystem write permissions and gain privileges by leveraging read permissions through a crafted application that makes mmap and ptrace system calls.

Recommendations For FreeBSD versions 9.0 through 9.1-RELEASE-p4, consider restricting access to the vm map lookup function until a patch is available. As a temporary workaround, avoid using the mmap and ptrace system calls in applications that require elevated privileges.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-2171

DSA-2714-1

Produtos afetados

Freebsd

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/local/mmap.rb · Exploit
• 🔥 https://exploit-db.com/exploits/26454 · Exploit
• 🔥 https://exploit-db.com/exploits/26368 · Exploit
• http://freebsd.org/security/advisories/FreeBSD-SA-13:06.mmap.asc · Aviso do Fabricante
• http://svnweb.freebsd.org/base?view=revision&revision=251901 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2171 · Nota de Segurança
• http://debian.org/security/2013/dsa-2714 · Aviso do Fabricante