PT-2004-1316 · Freebsd · Freebsd

Published 2004-06-23 · Updated 2017-07-11 · CVE-2004-0125

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 4.10-RELEASE

Description The issue concerns the jail system call in FreeBSD, which fails to verify the origin of attempts to manipulate routing tables. This could allow local users to modify the routing table.

Recommendations For versions prior to 4.10-RELEASE, update to version 4.10-RELEASE or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0125

Affected Products

Freebsd

References · 4

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc · Vendor Advisory
• http://securityfocus.com/bid/10485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0125 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16342 · Note