FreeBSD Ftrucante Local Denial of Service Vulnerability

Bugtraq ID:	20522
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Oct 13 2006 12:00AM
Updated:	Oct 16 2006 05:14PM
Credit:	Kirk Russell is credited with discovering this issue.
Vulnerable:	FreeBSD FreeBSD 6.1 -RELEASE-p10 FreeBSD FreeBSD 6.0 -RELEASE-p5
Not Vulnerable:

FreeBSD Ftrucante Local Denial of Service Vulnerability

FreeBSD is prone to a local denial-of-service vulnerability because it fails to handle exceptional conditions.

An attacker may leverage this issue to crash the affected computer, denying service to legitimate users. Under certain conditions, successful exploits may also corrupt the filesystem.

FreeBSD version 6.0-RELEASE-p5 and 6.1-RELEASE-p10 are vulnerable to this issue; other versions may also be affected.

FreeBSD Ftrucante Local Denial of Service Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/20522.c
• /data/vulnerabilities/exploits/bstg0001.c

FreeBSD Ftrucante Local Denial of Service Vulnerability

Solution:
The vendor has applied fixes to their CVS repository as of 31 May, 2006. The fix was brought into the RELENG_6 branch as of 14 June, 2006.

Please see the references for more information.

FreeBSD Ftrucante Local Denial of Service Vulnerability

References:

• CVS log for src/sys/ufs/ufs/ufs_vnops.c (FreeBSD)
  
• FreeBSD Homepage (FreeBSD)