CVE-2005-2218: High severity FreeBSD FreeBSD vulnerability

Published Jul 26, 2005

Updated

The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.

Affected Software

21 affected components

FreeBSD FreeBSD=5.0

FreeBSD FreeBSD=5.0-alpha

FreeBSD FreeBSD=5.0-release_p14

FreeBSD FreeBSD=5.0-releng

FreeBSD FreeBSD=5.1

FreeBSD FreeBSD=5.1-alpha

FreeBSD FreeBSD=5.1-release

FreeBSD FreeBSD=5.1-release_p5

FreeBSD FreeBSD=5.1-releng

FreeBSD FreeBSD=5.2

FreeBSD FreeBSD=5.2.1

FreeBSD FreeBSD=5.2.1-release

FreeBSD FreeBSD=5.2.1-releng

FreeBSD FreeBSD=5.3

FreeBSD FreeBSD=5.3-release

FreeBSD FreeBSD=5.3-releng

FreeBSD FreeBSD=5.3-stable

FreeBSD FreeBSD=5.4

FreeBSD FreeBSD=5.4-pre-release

FreeBSD FreeBSD=5.4-release

FreeBSD FreeBSD=5.4-releng

Event History

Jul 26, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2218?

CVE-2005-2218 is considered a high severity vulnerability due to the potential for unauthorized access to hidden devices.

How can I fix CVE-2005-2218?

To fix CVE-2005-2218, it is recommended to upgrade to a stable version of FreeBSD that addresses this vulnerability.

Which versions of FreeBSD are affected by CVE-2005-2218?

CVE-2005-2218 affects FreeBSD versions 5.x including 5.0, 5.1, 5.2.1, 5.3, and 5.4.

What type of attack does CVE-2005-2218 enable?

CVE-2005-2218 enables attackers to bypass restrictions on jailed processes by accessing hidden devices.

Is CVE-2005-2218 a local or remote vulnerability?

CVE-2005-2218 is primarily a local vulnerability, since it requires local access to exploit the device file system.