CVE-2008-3531

Related Files

FreeBSD nmount() Local Root Exploit

Posted Jul 3, 2009

Authored by Patroklos Argyroudis | Site census-labs.com

Local root exploit for FreeBSD nmount(). This affects FreeBSD 7.0-RELEASE and 7.0-STABLE.

tags | exploit, local, root

systems | freebsd

advisories | CVE-2008-3531

SHA-256 | f73657bff4c5f05a9a63c9564bcf7f676f9adf0f6b8a1b9a13e53473275ca23d

Download | Favorite | View

FreeBSD-SA-08-08.nmount.txt

Posted Sep 4, 2008

Site security.freebsd.org

FreeBSD Security Advisory - Various user defined input such as mount points, devices, and mount options are prepared and passed as arguments to nmount(2) into the kernel. Under certain error conditions, user defined data will be copied into a stack allocated buffer stored in the kernel without sufficient bounds checking. If the system is configured to allow unprivileged users to mount file systems, it is possible for a local adversary to exploit this vulnerability and execute code in the context of the kernel.

tags | advisory, kernel, local

systems | freebsd

advisories | CVE-2008-3531

SHA-256 | 8265017f0c4b0022d978e1e3604993352ecac41efc8b787596bf55e18a09b5bb

Download | Favorite | View