Lucene search
RedhatCVELIST:CVE-2013-2171HistoryJul 02, 2013 - 1:00 a.m.
CVE-2013-2171
2013-07-0201:00:00
redhat
www.cve.org
1
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.
Related
seebug
seebug
FreeBSD 9 Address Space Manipulation Privilege Escalation
2014-07-01 00:00:00
FreeBSD 本地权限提升漏洞(CVE-2013-2171)
2013-07-05 00:00:00
FreeBSD 9.0 本地权限提升漏洞(CVE-2013-2171)
2013-06-26 00:00:00
debian
debian
[SECURITY] [DSA 2714-1] kfreebsd-9 security update
2013-06-25 17:23:40
freebsd
freebsd
FreeBSD -- Privilege escalation via mmap
2013-06-18 00:00:00
packetstorm
packetstorm
FreeBSD 9.0+ Privilege Escalation
2013-06-22 00:00:00
FreeBSD 9 Address Space Manipulation Privilege Escalation
2013-06-26 00:00:00
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-13:06.mmap [REVISED]
2013-07-01 00:00:00
FreeBSD mmap+ptrace vulnerability
2013-07-01 00:00:00
nvd
nvd
CVE-2013-2171
2013-07-02 03:43:33
prion
prion
Design/Logic Flaw
2013-07-02 03:43:00
openvas
openvas
Debian: Security Advisory (DSA-2714-1)
2013-06-24 00:00:00
Debian Security Advisory DSA 2714-1 (kfreebsd-9 - programming error)
2013-06-25 00:00:00
ubuntucve
ubuntucve
CVE-2013-2171
2013-07-02 00:00:00
canvas
canvas
Immunity Canvas: MAPTRACE
2013-07-02 03:43:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-13:06.mmap
2013-06-18 00:00:00
nessus
nessus
Debian DSA-2714-1 : kfreebsd-9 - programming error
2013-06-26 00:00:00
metasploit
metasploit
FreeBSD 9 Address Space Manipulation Privilege Escalation
2013-06-24 16:50:21
cve
cve
CVE-2013-2171
2013-07-02 03:43:33
zdt
zdt
FreeBSD mmap Privilege Escalation Exploit
2013-06-20 00:00:00
exploitdb
exploitdb
FreeBSD 9 - Address Space Manipulation Privilege Escalation (Metasploit)
2013-06-26 00:00:00
securelist
securelist