CVE-2004-0125: High severity FreeBSD FreeBSD vulnerability
Published Jun 23, 2004
·Updated
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
Affected Software
42 affected components
FreeBSD FreeBSD=4.0
FreeBSD FreeBSD=4.0-alpha
FreeBSD FreeBSD=4.0-releng
FreeBSD FreeBSD=4.1
FreeBSD FreeBSD=4.1.1
FreeBSD FreeBSD=4.1.1-release
FreeBSD FreeBSD=4.1.1-stable
FreeBSD FreeBSD=4.2
FreeBSD FreeBSD=4.2-stable
FreeBSD FreeBSD=4.3
FreeBSD FreeBSD=4.3-release
FreeBSD FreeBSD=4.3-release_p38
FreeBSD FreeBSD=4.3-releng
FreeBSD FreeBSD=4.3-stable
FreeBSD FreeBSD=4.4
FreeBSD FreeBSD=4.4-release_p42
FreeBSD FreeBSD=4.4-releng
FreeBSD FreeBSD=4.4-stable
FreeBSD FreeBSD=4.5
FreeBSD FreeBSD=4.5-release
FreeBSD FreeBSD=4.5-release_p32
FreeBSD FreeBSD=4.5-releng
FreeBSD FreeBSD=4.5-stable
FreeBSD FreeBSD=4.6
FreeBSD FreeBSD=4.6-release
FreeBSD FreeBSD=4.6-release_p20
FreeBSD FreeBSD=4.6-releng
FreeBSD FreeBSD=4.6-stable
FreeBSD FreeBSD=4.6.2
FreeBSD FreeBSD=4.7
FreeBSD FreeBSD=4.7-release
FreeBSD FreeBSD=4.7-release_p17
FreeBSD FreeBSD=4.7-releng
FreeBSD FreeBSD=4.7-stable
FreeBSD FreeBSD=4.8
FreeBSD FreeBSD=4.8-pre-release
FreeBSD FreeBSD=4.8-release_p6
FreeBSD FreeBSD=4.8-releng
FreeBSD FreeBSD=4.9
FreeBSD FreeBSD=4.9-pre-release
FreeBSD FreeBSD=4.9-releng
FreeBSD FreeBSD=4.10
Remediation
Patch Available
Event History
Jun 23, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0125?
CVE-2004-0125 is considered a moderate severity vulnerability as it allows local users to manipulate routing tables.
2
How do I fix CVE-2004-0125?
To fix CVE-2004-0125, it is recommended to upgrade to FreeBSD version 4.10-RELEASE or later.
3
Which versions of FreeBSD are affected by CVE-2004-0125?
CVE-2004-0125 affects FreeBSD versions 4.0 through 4.9, excluding version 4.10-RELEASE.
4
Can CVE-2004-0125 be exploited remotely?
No, CVE-2004-0125 is a local vulnerability and cannot be exploited remotely.
5
What impact does CVE-2004-0125 have on system security?
CVE-2004-0125 can allow local users to alter the system's routing tables, potentially leading to network disruption or man-in-the-middle attacks.