PT-2013-3575 · Freebsd · Freebsd

Alan Cox + 1 · Published 2013-07-02 · Updated 2019-03-18 · CVE-2013-2171

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.0 through 9.1-RELEASE-p4

Description The issue concerns the vm map lookup function in the kernel's mmap implementation, which fails to properly determine whether a task should have write access to a memory location. This allows local users to bypass filesystem write permissions and gain privileges by leveraging read permissions through a crafted application that makes mmap and ptrace system calls.

Recommendations For FreeBSD versions 9.0 through 9.1-RELEASE-p4, consider restricting access to the vm map lookup function until a patch is available. As a temporary workaround, avoid using the mmap and ptrace system calls in applications that require elevated privileges.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-2171

DSA-2714-1

Affected Products

Freebsd

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/local/mmap.rb · Exploit
• 🔥 https://exploit-db.com/exploits/26454 · Exploit
• 🔥 https://exploit-db.com/exploits/26368 · Exploit
• http://freebsd.org/security/advisories/FreeBSD-SA-13:06.mmap.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2171 · Security Note
• http://debian.org/security/2013/dsa-2714 · Vendor Advisory
• http://svnweb.freebsd.org/base?view=revision&revision=251901 · Note