FreeBSD mbuf Handling Local Privilege Escalation Vulnerability

Bugtraq ID:	41577
Class:	Unknown
CVE:	CVE-2010-2693
Remote:	No
Local:	Yes
Published:	Jul 13 2010 12:00AM
Updated:	Jan 05 2011 08:52PM
Credit:	Ming Fu
Vulnerable:	FreeBSD FreeBSD 8.1-PRERELEASE FreeBSD FreeBSD 8.0-STABLE FreeBSD FreeBSD 8.0-RELEASE FreeBSD FreeBSD 7.3-STABLE FreeBSD FreeBSD 7.3-RELEASE-p1 FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.2-RELEASE-p4 FreeBSD FreeBSD 7.2-RELEASE-p1 FreeBSD FreeBSD 7.2-RC2 FreeBSD FreeBSD 7.2-PRERELEASE FreeBSD FreeBSD 7.1-STABLE FreeBSD FreeBSD 7.1-RELEASE-p6 FreeBSD FreeBSD 7.1-RELEASE-p5 FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD FreeBSD 7.1 Rc1 FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD FreeBSD 7.1 -PRE-RELEASE FreeBSD FreeBSD 7.1 FreeBSD FreeBSD 7.0-STABLE FreeBSD FreeBSD 7.0-RELEASE-p8 FreeBSD FreeBSD 7.0-RELEASE-p3 FreeBSD FreeBSD 7.0-RELEASE-p12 FreeBSD FreeBSD 7.0-RELEASE-p11 FreeBSD FreeBSD 7.0-RELEASE FreeBSD FreeBSD 7.0 BETA4 FreeBSD FreeBSD 7.0 -RELENG FreeBSD FreeBSD 7.0 -RELEASE-p9 FreeBSD FreeBSD 7.0 -PRERELEASE FreeBSD FreeBSD 7.0
Not Vulnerable:

FreeBSD mbuf Handling Local Privilege Escalation Vulnerability

FreeBSD is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain elevated privileges. Successful exploits will result in the complete compromise of affected computers.

FreeBSD versions 7.x and later are affected.

FreeBSD mbuf Handling Local Privilege Escalation Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/41577.c

FreeBSD mbuf Handling Local Privilege Escalation Vulnerability

Solution:
The vendor released an advisory and patches to address this issue. Please see the references for details.

FreeBSD mbuf Handling Local Privilege Escalation Vulnerability

References:

• FreeBSD Homepage (FreeBSD)