Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2004-0099
cve-2004-0099
mksnap_ffs
freebsd
access restrictions
snapshot flags
security vulnerability
local user
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions.
Affected configurations
Node
freebsdfreebsdMatch5.1release
ORfreebsdfreebsdMatch5.2.1release
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 5.1 |
| freebsd:freebsd | freebsd | eq | 5.2.1 |
Related
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:01.mksnap_ffs
2004-01-30 00:00:00
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-04:01.mksnap_ffs.asc)
2008-09-04 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-04:01.mksnap_ffs.asc)
2008-09-04 00:00:00
freebsd
freebsd
mksnap_ffs clears file system options
2004-01-30 00:00:00
nessus
nessus
FreeBSD : SA-04:01.mksnap_ff
2004-07-06 00:00:00
cvelist
cvelist
CVE-2004-0099
2004-09-01 04:00:00
nvd
nvd
CVE-2004-0099
2004-03-03 05:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2004-0099