CVE-2002-1125: Low severity freebsd freebsd vulnerability
FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1125?
CVE-2002-1125 has a high severity rating due to its potential to expose sensitive kernel memory to local users.
How do I fix CVE-2002-1125?
To fix CVE-2002-1125, update to a patched version of FreeBSD that does not leave open file descriptors for /dev/mem and /dev/kmem.
Who is affected by CVE-2002-1125?
CVE-2002-1125 affects local users of FreeBSD versions 4.6.2-RELEASE and earlier that use certain port programs utilizing libkvm.
What are the potential consequences of CVE-2002-1125?
The potential consequences of CVE-2002-1125 include unauthorized access to sensitive information stored in kernel memory.
Is CVE-2002-1125 a local or remote vulnerability?
CVE-2002-1125 is a local vulnerability, as it requires local user access to exploit.