Core Security
info@coresecurity.com  | +1.617.399.6980 | Contact Us   Core Blog Core Blog Twitter LinkedIn youtube
SHARE

CORE IMPACT v8 - Exploits Update (Mon Apr 06 2009)

FreeBSD Kernel Protosw Privilege Escalation Exploit

Exploits/Local  [FreeBSD]




• Mon Apr 06 2009
The FreeBSD kernel provides support for a variety of different types of communications sockets, including IPv4, IPv6, ISDN, ATM, routing protocol, link-layer, netgraph(4), and bluetooth sockets. Some function pointers for netgraph and bluetooth sockets are not properly initialized. This can be exploited to e.g. read or write to arbitrary kernel memory via a specially crafted "socket()" system call, and allows an unprivileged process to elevate privileges to root or escape a FreeBSD jail.

Exploits Vulnerabiltiy: CVE-2008-5736



< Back to Product Updates