CVEvulnerability
CVE-2004-0125
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-08-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
Affected configurations
• freebsd freebsd 4.0
• freebsd freebsd 4.1
• freebsd freebsd 4.1.1
• freebsd freebsd 4.2
• freebsd freebsd 4.3
• freebsd freebsd 4.4
• freebsd freebsd 4.5
• freebsd freebsd 4.6
• freebsd freebsd 4.6.2
• freebsd freebsd 4.7
• freebsd freebsd 4.8
• freebsd freebsd 4.9
• freebsd freebsd 4.10
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc ftp.freebsd.org
- http://www.securityfocus.com/bid/10485 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16342 exchange.xforce.ibmcloud.com
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc ftp.freebsd.org
- http://www.securityfocus.com/bid/10485 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16342 exchange.xforce.ibmcloud.com