CVE-2008-3531: Buffer Overflow

Published Sep 5, 2008

Updated

Stack-based buffer overflow in sys/kern/vfsmount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of "user defined data" in "certain error conditions."

Affected Software

2 affected components

FreeBSD FreeBSD=7.0

FreeBSD FreeBSD=7.1

Remediation

Patch Available

http://www.securityfocus.com/bid/31002

Event History

Sep 5, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3531?

CVE-2008-3531 is considered to have high severity due to its potential to allow local users to gain privileges.

How do I fix CVE-2008-3531?

To fix CVE-2008-3531, upgrade to a patched version of FreeBSD that addresses the vulnerability.

Who is affected by CVE-2008-3531?

CVE-2008-3531 affects users running FreeBSD versions 7.0 and 7.1 with vfs.usermount enabled.

What is the nature of the vulnerability in CVE-2008-3531?

CVE-2008-3531 is a stack-based buffer overflow that can be exploited through crafted mount or nmount system calls.

Is CVE-2008-3531 an exploit that requires remote access?

No, CVE-2008-3531 is a local privilege escalation vulnerability that can be exploited by local users.