FreeBSD 'execl()' Local Privilege Escalation Vulnerability

BID:37154

Info

FreeBSD 'execl()' Local Privilege Escalation Vulnerability

Bugtraq ID: 37154
Class: Design Error
CVE: CVE-2009-4146
CVE-2009-4147
Remote: No
Local: Yes
Published: Nov 30 2009 12:00AM
Updated: Mar 19 2015 09:18AM
Credit: Nikolaos Rangos (Kingcope)
Vulnerable: FreeBSD FreeBSD 8.0-STABLE
FreeBSD FreeBSD 8.0-RELEASE
FreeBSD FreeBSD 7.2-STABLE
FreeBSD FreeBSD 7.2-RELEASE-p4
FreeBSD FreeBSD 7.2-RELEASE-p1
FreeBSD FreeBSD 7.2-RC2
FreeBSD FreeBSD 7.2-PRERELEASE
FreeBSD FreeBSD 7.1-STABLE
FreeBSD FreeBSD 7.1-RELEASE-p6
FreeBSD FreeBSD 7.1-RELEASE-p5
FreeBSD FreeBSD 7.1-RELEASE-p4
FreeBSD FreeBSD 7.1 -RELEASE-p2
FreeBSD FreeBSD 7.1 -RELEASE-p1
FreeBSD FreeBSD 7.1 -PRE-RELEASE
FreeBSD FreeBSD 7.0-STABLE
FreeBSD FreeBSD 7.0-RELEASE-p8
FreeBSD FreeBSD 7.0-RELEASE-p3
FreeBSD FreeBSD 7.0-RELEASE-p12
FreeBSD FreeBSD 7.0-RELEASE-p11
FreeBSD FreeBSD 7.0-RELEASE
FreeBSD FreeBSD 7.0 BETA4
FreeBSD FreeBSD 7.0 -RELENG
FreeBSD FreeBSD 7.0 -RELEASE-p9
FreeBSD FreeBSD 7.0 -PRERELEASE
FreeBSD FreeBSD 7.0
BSD Perimeter pfSense 1.2.2
BSD Perimeter pfSense 1.2.1
BSD Perimeter pfSense 1.2-RC4
BSD Perimeter pfSense 1.2-RC3
BSD Perimeter pfSense 1.2-RC2
BSD Perimeter pfSense 1.2-RC1
BSD Perimeter pfSense 1.2
Not Vulnerable: BSD Perimeter pfSense 1.2.3

Discussion

FreeBSD 'execl()' Local Privilege Escalation Vulnerability

FreeBSD is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with root privileges. Successful exploits will result in the complete compromise of affected computers.

FreeBSD 7.0-RELEASE through 8.0-RELEASE are vulnerable; other versions may also be affected.

Exploit / POC

FreeBSD 'execl()' Local Privilege Escalation Vulnerability

The following exploits are available:

Solution / Fix

FreeBSD 'execl()' Local Privilege Escalation Vulnerability

Solution:
The vendor released an advisory and patches to address this issue. Please see the references for details.


BSD Perimeter pfSense 1.2

BSD Perimeter pfSense 1.2-RC4

BSD Perimeter pfSense 1.2-RC3

BSD Perimeter pfSense 1.2-RC1

BSD Perimeter pfSense 1.2-RC2

BSD Perimeter pfSense 1.2

BSD Perimeter pfSense 1.2.1

BSD Perimeter pfSense 1.2.2

References

FreeBSD 'execl()' Local Privilege Escalation Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report