CVE-2004-0126: Medium severity FreeBSD FreeBSD vulnerability
The jailattach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0126?
CVE-2004-0126 is classified as a high-severity vulnerability due to its potential to allow unauthorized access to files and directories within a FreeBSD jail.
How do I fix CVE-2004-0126?
To fix CVE-2004-0126, update your FreeBSD installation to a version later than 5.2.1 that contains the relevant security patches.
Who is affected by CVE-2004-0126?
CVE-2004-0126 affects local users on FreeBSD versions 5.1 and 5.2, allowing them to exploit the jail_attach system call.
What are the consequences of CVE-2004-0126?
The consequences of CVE-2004-0126 include the possibility for local users to gain elevated read/write privileges within another jail.
What systems are vulnerable to CVE-2004-0126?
FreeBSD 5.1 and 5.2, including their release versions, are vulnerable to CVE-2004-0126.