FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity

Bugtraq ID:	49862
Class:	Boundary Condition Error
CVE:	CVE-2011-4062
Remote:	No
Local:	Yes
Published:	Sep 29 2011 12:00AM
Updated:	Oct 24 2011 02:52PM
Credit:	Reported by the vendor
Vulnerable:	FreeBSD Freebsd 8.2-RELEASE-p2 FreeBSD Freebsd 8.2-RELEASE-p1 FreeBSD Freebsd 8.2 FreeBSD Freebsd 8.1-RELEASE-p4 FreeBSD FreeBSD 8.1-RELEASE FreeBSD FreeBSD 8.1-PRERELEASE FreeBSD Freebsd 8.1 FreeBSD FreeBSD 8.0-STABLE FreeBSD FreeBSD 8.0-RELEASE FreeBSD Freebsd 7.4-RELEASE-p2 FreeBSD Freebsd 7.4 FreeBSD FreeBSD 7.3-STABLE FreeBSD Freebsd 7.3-RELEASE-p6 FreeBSD FreeBSD 7.3-RELEASE-p1 FreeBSD Freebsd 7.3 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	FreeBSD Freebsd 9.0-RC1 FreeBSD Freebsd 8.2-STABLE FreeBSD Freebsd 8.2 - RELEASE -p3 FreeBSD Freebsd 8.1-RELEASE-p5 FreeBSD Freebsd 7.4-STABLE FreeBSD Freebsd 7.3 - RELEASE - p7

FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity

FreeBSD is prone to a local privilege-escalation vulnerability.

Attackers can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity

The following POC is available:

• /data/vulnerabilities/exploits/49862.sh

FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity

Solution:
Updates are available. Please see the references for more information.

FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity

References:

• FreeBSD Homepage (FreeBSD)