PT-2001-2305 · Freebsd · Freebsd

Published 2001-08-21 · Updated 2008-09-05 · CVE-2001-1166

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.3 and earlier

Description The issue concerns linprocfs on FreeBSD, which fails to properly restrict access to kernel memory. This allows a process with debugging rights on a privileged process to read restricted memory from that process.

Recommendations For versions 4.3 and earlier, update to a version later than 4.3 to resolve the issue.

Fix

Related Identifiers

CVE-2001-1166

Affected Products

Freebsd

References · 5

• http://securityfocus.com/bid/3217 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1166 · Security Note
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:55.procfs.asc · Vendor Advisory
• http://iss.net/security_center/static/7017.php · Vendor Advisory
• http://osvdb.org/1938 · Note