FreeBSD UFS Uncleared Block Data Recovery Vulnerability
BID:2528
Info
FreeBSD UFS Uncleared Block Data Recovery Vulnerability
| Bugtraq ID: | 2528 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 22 2001 12:00AM |
| Updated: | Mar 22 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq in a FreeBSD Security Advisory on March 22, 2001. |
| Vulnerable: |
FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 3.5.1 |
| Not Vulnerable: | |
Discussion
FreeBSD UFS Uncleared Block Data Recovery Vulnerability
FreeBSD is an Open Source, freely available operating system maintained by the FreeBSD Project. FreeBSD is designed to offer a flexible, scalable BSD UNIX Operating System with enhancements for the x86 platform.
A problem with the operating system could allow users to gain access to sensitive information. Under some circumstances, blocks in the UFS filesystem that were previously allocated to the storage of files may not be flushed and zeroed. This vulnerability also affects the EXT2 filesystem implementation on the FreeBSD platform.
Therefore, it is possible for a user to gain access to data previously stored, which could result in information gathering, or elevated privileges.
FreeBSD is an Open Source, freely available operating system maintained by the FreeBSD Project. FreeBSD is designed to offer a flexible, scalable BSD UNIX Operating System with enhancements for the x86 platform.
A problem with the operating system could allow users to gain access to sensitive information. Under some circumstances, blocks in the UFS filesystem that were previously allocated to the storage of files may not be flushed and zeroed. This vulnerability also affects the EXT2 filesystem implementation on the FreeBSD platform.
Therefore, it is possible for a user to gain access to data previously stored, which could result in information gathering, or elevated privileges.
Exploit / POC
FreeBSD UFS Uncleared Block Data Recovery Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
FreeBSD UFS Uncleared Block Data Recovery Vulnerability
Solution:
Patches available:
FreeBSD FreeBSD 3.5.1
FreeBSD FreeBSD 4.2
Solution:
Patches available:
FreeBSD FreeBSD 3.5.1
-
FreeBSD fs.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-01:30/fs.patch
FreeBSD FreeBSD 4.2
-
FreeBSD fs.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-01:30/fs.patch
References
FreeBSD UFS Uncleared Block Data Recovery Vulnerability
References:
References: