FreeBSD CVE-2013-2171 Local Privilege Escalation Vulnerabiity

Bugtraq ID:	60615
Class:	Design Error
CVE:	CVE-2013-2171
Remote:	No
Local:	Yes
Published:	Jun 18 2013 12:00AM
Updated:	Jun 26 2013 08:20AM
Credit:	Konstantin Belousov and Alan Cox
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

FreeBSD CVE-2013-2171 Local Privilege Escalation Vulnerabiity

FreeBSD is prone to a local privilege-escalation vulnerability.

Attackers can exploit this issue to overwrite portions of kernel memory, resulting in a privilege escalation or a system panic.

FreeBSD 9.0 is vulnerable; other versions may also be affected.

FreeBSD CVE-2013-2171 Local Privilege Escalation Vulnerabiity

The following exploit codes are available:

• /data/vulnerabilities/exploits/60615_1.c
• /data/vulnerabilities/exploits/60615.c
• /data/vulnerabilities/exploits/60615.rb

FreeBSD CVE-2013-2171 Local Privilege Escalation Vulnerabiity

Solution:
Updates are available. Please see the references or vendor advisory for more information.

FreeBSD CVE-2013-2171 Local Privilege Escalation Vulnerabiity

References:

• FreeBSD Homepage (FreeBSD)