CORE IMPACT v8 - Exploits Update (Mon Apr 06 2009)
FreeBSD Kernel Protosw Privilege Escalation Exploit
Exploits/Local [FreeBSD]
Mon Apr 06 2009
The FreeBSD kernel provides support for a variety of different types of communications sockets, including IPv4, IPv6, ISDN, ATM, routing protocol, link-layer, netgraph(4), and bluetooth sockets. Some function pointers for netgraph and bluetooth sockets are not properly initialized. This can be exploited to e.g. read or write to arbitrary kernel memory via a specially crafted "socket()" system call, and allows an unprivileged process to elevate privileges to root or escape a FreeBSD jail.
Exploits Vulnerabiltiy: CVE-2008-5736











