Lucene search
HistoryAug 06, 2004 - 4:00 a.m.
CVE-2004-0125
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
Affected configurations
Node
freebsdfreebsdMatch4.0
ORfreebsdfreebsdMatch4.0alpha
ORfreebsdfreebsdMatch4.0releng
ORfreebsdfreebsdMatch4.1
ORfreebsdfreebsdMatch4.1.1
ORfreebsdfreebsdMatch4.1.1release
ORfreebsdfreebsdMatch4.1.1stable
ORfreebsdfreebsdMatch4.2
ORfreebsdfreebsdMatch4.2stable
ORfreebsdfreebsdMatch4.3
ORfreebsdfreebsdMatch4.3release
ORfreebsdfreebsdMatch4.3release_p38
ORfreebsdfreebsdMatch4.3releng
ORfreebsdfreebsdMatch4.3stable
ORfreebsdfreebsdMatch4.4
ORfreebsdfreebsdMatch4.4release_p42
ORfreebsdfreebsdMatch4.4releng
ORfreebsdfreebsdMatch4.4stable
ORfreebsdfreebsdMatch4.5
ORfreebsdfreebsdMatch4.5release
ORfreebsdfreebsdMatch4.5release_p32
ORfreebsdfreebsdMatch4.5releng
ORfreebsdfreebsdMatch4.5stable
ORfreebsdfreebsdMatch4.6
ORfreebsdfreebsdMatch4.6release
ORfreebsdfreebsdMatch4.6release_p20
ORfreebsdfreebsdMatch4.6releng
ORfreebsdfreebsdMatch4.6stable
ORfreebsdfreebsdMatch4.6.2
ORfreebsdfreebsdMatch4.7
ORfreebsdfreebsdMatch4.7release
ORfreebsdfreebsdMatch4.7release_p17
ORfreebsdfreebsdMatch4.7releng
ORfreebsdfreebsdMatch4.7stable
ORfreebsdfreebsdMatch4.8
ORfreebsdfreebsdMatch4.8pre-release
ORfreebsdfreebsdMatch4.8release_p6
ORfreebsdfreebsdMatch4.8releng
ORfreebsdfreebsdMatch4.9
ORfreebsdfreebsdMatch4.9pre-release
ORfreebsdfreebsdMatch4.9releng
ORfreebsdfreebsdMatch4.10
Related
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:12.jailroute
2004-06-07 00:00:00
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)
2008-09-04 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)
2008-09-04 00:00:00
cve
cve
CVE-2004-0125
2004-08-06 04:00:00
securityvulns
securityvulns
FreeBSD-SA-04:12.jailroute
2004-06-08 00:00:00
nessus
nessus
FreeBSD : SA-04:12.jailroute
2004-07-06 00:00:00
freebsd
freebsd
jailed processes can manipulate host routing tables
2004-02-03 00:00:00
cvelist
cvelist
CVE-2004-0125
2004-06-23 04:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2004-0125