CVE-2015-1415

Related Files

FreeBSD Security Advisory - GELI Keyfile Permissions

Posted Apr 8, 2015

Authored by Pierre Kim | Site security.freebsd.org

FreeBSD Security Advisory - The default permission set by bsdinstall installer when configuring full disk encrypted ZFS is too open. A local attacker may be able to get a copy of the geli provider's keyfile which is located at a fixed location.

tags | advisory, local

systems | freebsd

advisories | CVE-2015-1415

SHA-256 | b3caa52ef726a17708288086b7ed4e36096670a967e1bef2ea0c8a10159dd6d1

Download | Favorite | View

FreeBSD 10.x ZFS encryption.key Disclosure

Posted Apr 8, 2015

Authored by Pierre Kim

FreeBSD 10.x installer supports the installation of FreeBSD 10.x on an encrypted ZFS filesystem by default. When using the encryption system within ZFS during the installation of FreeBSD 10.0 and FreeBSD 10.1, the encryption.key has wrong permissions which allow local users to read this file. Even if the keyfile is passphrase-encrypted, it can present a risk.

tags | exploit, local, info disclosure

systems | freebsd

advisories | CVE-2015-1415

SHA-256 | 2d73956e559f4d283ab25bf45d7bdbe684659d4e06b9a91ed68cecd406c970cf

Download | Favorite | View