CVE-2009-4358: Medium severity freebsd kernel vulnerability

Published Dec 20, 2009

Updated

freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default), which allows local users to read copies of sensitive files after a (1) freebsd-update fetch (fetch) or (2) freebsd-update upgrade (upgrade) operation.

Affected Software

5 affected components

FreeBSD FreeBSD=6.3

FreeBSD FreeBSD=6.4

FreeBSD FreeBSD=7.1

FreeBSD FreeBSD=7.2

FreeBSD FreeBSD=8.0

Remediation

Patch Available

http://www.securityfocus.com/bid/37190

Event History

Dec 20, 2009

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4358?

CVE-2009-4358 is considered a moderate vulnerability due to its impact on local user access to sensitive files.

How do I fix CVE-2009-4358?

To fix CVE-2009-4358, you should update your FreeBSD system to a version that addresses the insecure permissions issue in freebsd-update.

What versions of FreeBSD are affected by CVE-2009-4358?

CVE-2009-4358 affects FreeBSD versions 6.3, 6.4, 7.1, 7.2, and 8.0.

Can CVE-2009-4358 be exploited remotely?

No, CVE-2009-4358 can only be exploited locally by users with access to the vulnerable FreeBSD systems.

What components are involved in the CVE-2009-4358 vulnerability?

The vulnerability involves the 'freebsd-update' tool in FreeBSD and its insecure handling of permissions in the working directory.