CVE-2005-4351: Medium severity DragonFly DragonFly vulnerability
The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4351?
CVE-2005-4351 is considered a high-severity vulnerability due to its potential to allow unauthorized access to immutable files by root users.
How do I fix CVE-2005-4351?
To fix CVE-2005-4351, it is recommended to upgrade to the latest stable versions of FreeBSD, OpenBSD, DragonFly, or Linux kernel that patched this vulnerability.
Which systems are affected by CVE-2005-4351?
CVE-2005-4351 affects FreeBSD 6.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15.
What methods can attackers use to exploit CVE-2005-4351?
Attackers can exploit CVE-2005-4351 by mounting a filesystem that masks immutable files while the operating system is running.
Is it possible to mitigate CVE-2005-4351 without upgrading?
To mitigate CVE-2005-4351 without upgrading, administrators should limit root access and avoid mounting new filesystems that could expose immutable files.