CVE-2000-0461: Low severity FreeBSD FreeBSD vulnerability
The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or remove the undocumented semconfig system call in the kernel to prevent local users from freezing semaphore state and causing a denial of service.
BSD kernel (semconfig system call) semconfig syscall = disabled - Compensating control
Restrict or remove untrusted local user access to affected systems (FreeBSD Kernel and NetBSD current) until the vulnerable semconfig functionality is removed or patched; enforce stricter local account control and access restrictions to reduce risk of exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0461?
CVE-2000-0461 is classified as a denial of service vulnerability.
How do I fix CVE-2000-0461?
To mitigate CVE-2000-0461, consider upgrading to a version of FreeBSD or NetBSD that does not support the semconfig system call.
Which versions of FreeBSD are affected by CVE-2000-0461?
CVE-2000-0461 affects multiple FreeBSD versions including 1.1.5.1, 2.0, 2.1.x, 2.2.x, and 3.x.
Can CVE-2000-0461 be exploited by remote attackers?
CVE-2000-0461 can only be exploited by local users, not remote attackers.
What systems are impacted by CVE-2000-0461?
CVE-2000-0461 impacts FreeBSD and NetBSD systems that support the semconfig system call.