FreeBSD mksnap_ffs File System Option Reset Vulnerability
BID:9533
Info
FreeBSD mksnap_ffs File System Option Reset Vulnerability
| Bugtraq ID: | 9533 |
| Class: | Design Error |
| CVE: |
CVE-2004-0099 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 30 2004 12:00AM |
| Updated: | Jul 12 2009 02:06AM |
| Credit: | Discovery is credited to Kimura Fuyuki <[email protected]> and Wiktor Niesiobedzki <[email protected]>. |
| Vulnerable: |
FreeBSD FreeBSD 5.2 FreeBSD FreeBSD 5.1 |
| Not Vulnerable: | |
Discussion
FreeBSD mksnap_ffs File System Option Reset Vulnerability
A vulnerability has been reported in the FreeBSD mksnap_ffs utility that could cause file system security properties to be reset. When the utility is run, it does not preserve various file system flags. If the file system is restored from the snapshot, these settings will have their default values, which may impact security if file system security settings were enabled on the file system prior to the utility being run to take a snapsnot of the file system.
A vulnerability has been reported in the FreeBSD mksnap_ffs utility that could cause file system security properties to be reset. When the utility is run, it does not preserve various file system flags. If the file system is restored from the snapshot, these settings will have their default values, which may impact security if file system security settings were enabled on the file system prior to the utility being run to take a snapsnot of the file system.
Exploit / POC
FreeBSD mksnap_ffs File System Option Reset Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
FreeBSD mksnap_ffs File System Option Reset Vulnerability
Solution:
This issue was addressed in FreeBSD security branches created on the following dates or later:
2004-01-27 19:33:16 UTC (RELENG_5_1, 5.1-RELEASE-p12)
2004-01-29 22:54:31 UTC (RELENG_5_2, 5.2-RELEASE-p1)
FreeBSD has also released patches.
FreeBSD FreeBSD 5.1
FreeBSD FreeBSD 5.2
Solution:
This issue was addressed in FreeBSD security branches created on the following dates or later:
2004-01-27 19:33:16 UTC (RELENG_5_1, 5.1-RELEASE-p12)
2004-01-29 22:54:31 UTC (RELENG_5_2, 5.2-RELEASE-p1)
FreeBSD has also released patches.
FreeBSD FreeBSD 5.1
-
FreeBSD mksnap_ffs_5_1.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-04:01/mksnap_ffs_5_1 .patch
FreeBSD FreeBSD 5.2
-
FreeBSD mksnap_ffs_5_2.patch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-04:01/mksnap_ffs_5_2 .patch
References
FreeBSD mksnap_ffs File System Option Reset Vulnerability
References:
References: