BID:11321

FreeBSD Syscons CONS_SCRSHOT Kernel Memory Disclosure Vulnerability

Info

FreeBSD Syscons CONS_SCRSHOT Kernel Memory Disclosure Vulnerability

Bugtraq ID:	11321
Class:	Design Error
CVE:	CVE-2004-0919
Remote:	No
Local:	Yes
Published:	Oct 04 2004 12:00AM
Updated:	Jul 12 2009 07:06AM
Credit:	Discovery of this vulnerability is credited to Christer Oberg.
Vulnerable:	FreeBSD FreeBSD 5.2.1 -RELEASE FreeBSD FreeBSD 5.2 -RELENG FreeBSD FreeBSD 5.2 -RELEASE FreeBSD FreeBSD 5.2 FreeBSD FreeBSD 5.1 -RELENG FreeBSD FreeBSD 5.1 -RELEASE/Alpha FreeBSD FreeBSD 5.1 -RELEASE-p5 FreeBSD FreeBSD 5.1 -RELEASE FreeBSD FreeBSD 5.1 FreeBSD FreeBSD 5.0 -RELENG FreeBSD FreeBSD 5.0 -RELEASE-p14 FreeBSD FreeBSD 5.0 alpha FreeBSD FreeBSD 5.0

Not Vulnerable:

Discussion

FreeBSD Syscons CONS_SCRSHOT Kernel Memory Disclosure Vulnerability

It is reported that it is possible to trigger a memory disclosure vulnerability in the FreeBSD syscons driver.

An attacker may leverage this issue to read portions of kernel memory. This could allow an attacker to read sensitive data such as a file cache or terminal buffers that may contain a password. Data harvested through exploiting this vulnerability may be used to aid in further attacks launched against the affected computer.

Exploit / POC

FreeBSD Syscons CONS_SCRSHOT Kernel Memory Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

FreeBSD Syscons CONS_SCRSHOT Kernel Memory Disclosure Vulnerability

Solution:
The vendor has released an advisory (FreeBSD-SA-04:15.syscons) and patches to address this vulnerability. Please see the referenced advisory for further details regarding obtaining and applying appropriate patches.

FreeBSD FreeBSD 5.0 -RELENG