PT-2005-5037 · Freebsd+3 · Freebsd+3

Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4351

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 7.0 and earlier OpenBSD versions up to 3.8 DragonFly versions up to 1.2 Linux versions up to 2.6.15

Description The securelevels implementation allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.

Recommendations For FreeBSD versions 7.0 and earlier, consider upgrading to a version later than 7.0 to resolve the issue. For OpenBSD versions up to 3.8, consider upgrading to a version later than 3.8 to resolve the issue. For DragonFly versions up to 1.2, consider upgrading to a version later than 1.2 to resolve the issue. For Linux versions up to 2.6.15, consider upgrading to a version later than 2.6.15 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-4351

Affected Products

Dragonfly

Freebsd

Linux

Openbsd

References · 6

• 🔥 http://redteam-pentesting.de/advisories/rt-sa-2005-015.txt · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4351 · Security Note
• http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html · Note
• http://redteam-pentesting.de/advisories/rt-sa-2005-15.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24037 · Note