Lucene search

K
cveMitreCVE-2008-3531
HistorySep 05, 2008 - 4:08 p.m.

CVE-2008-3531

2008-09-0516:08:00
CWE-119
mitre
web.nvd.nist.gov
28
cve-2008-3531
buffer overflow
freebsd
kernel
local privilege escalation
vulnerability
security advisory

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

0.4%

Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of β€œuser defined data” in β€œcertain error conditions.”

Affected configurations

Nvd
Node
freebsdfreebsdMatch7.0
OR
freebsdfreebsdMatch7.1
VendorProductVersionCPE
freebsdfreebsd7.0cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*
freebsdfreebsd7.1cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

0.4%