Lucene search
K

FreeBSD Security Advisory (FreeBSD-SA-10:09.pseudofs.asc)

🗓️ 17 Nov 2010 00:00:00Reported by Copyright (c) 2010 E-Soft Inc. http://www.securityspace.comType 
openvas
 openvas
🔗 plugins.openvas.org👁 18 Views

pseudofs offers an abstract API for pseudo file systems, utilized by procfs(5) and linprocfs(5), adding ACLs and extended attributes. pfs_getextattr(9) function attempts to unlock a mutex which was not previously locked

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2010-4210
4 Oct 201000:00
circl
CVE
CVE-2010-4210
20 Nov 201020:00
cve
Cvelist
CVE-2010-4210
20 Nov 201020:00
cvelist
Debian CVE
CVE-2010-4210
20 Nov 201020:00
debiancve
FreeBSD Advisory
FreeBSD-SA-10:09.pseudofs
10 Nov 201000:00
freebsd_advisory
NVD
CVE-2010-4210
22 Nov 201012:54
nvd
OpenVAS
FreeBSD Security Advisory (FreeBSD-SA-10:09.pseudofs.asc)
17 Nov 201000:00
openvas
Prion
Design/Logic Flaw
22 Nov 201012:54
prion
Positive Technologies
PT-2010-5358 · Freebsd · Freebsd
20 Nov 201000:00
ptsecurity
securityvulns
FreeBSD Security Advisory FreeBSD-SA-10:09.pseudofs
15 Nov 201000:00
securityvulns
Rows per page
#
#ADV FreeBSD-SA-10:09.pseudofs.asc
# OpenVAS Vulnerability Test
# $
# Description: Auto generated from ADV FreeBSD-SA-10:09.pseudofs.asc
#
# Authors:
# Thomas Reinke <[email protected]>
#
# Copyright:
# Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com
# Text descriptions are largely excerpted from the referenced
# advisories, and are Copyright (c) the respective author(s)
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2,
# as published by the Free Software Foundation
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#

tag_insight = "pseudofs offers an abstract API for pseudo file systems which is utilized by
procfs(5) and linprocfs(5).  It provides generic file system services such
as ACLs, extended attributes which interface with VFS and which are otherwise
onerous to implement.  This enables pseudo file system authors to add this
functionality to their file systems with minimal effort.

The pfs_getextattr(9) function, used by pseudofs for handling extended
attributes, attempts to unlock a mutex which was not previously locked.";
tag_solution = "Upgrade your system to the appropriate stable release
or security branch dated after the correction date

https://secure1.securityspace.com/smysecure/catid.html?in=FreeBSD-SA-10:09.pseudofs.asc";
tag_summary = "The remote host is missing an update to the system
as announced in the referenced advisory FreeBSD-SA-10:09.pseudofs.asc";


if(description)
{
 script_id(68514);
 script_version("$Revision: 5263 $");
 script_tag(name:"last_modification", value:"$Date: 2017-02-10 14:45:51 +0100 (Fri, 10 Feb 2017) $");
 script_tag(name:"creation_date", value:"2010-11-17 03:33:48 +0100 (Wed, 17 Nov 2010)");
 script_tag(name:"cvss_base", value:"7.2");
 script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_cve_id("CVE-2010-4210");
 script_name("FreeBSD Security Advisory (FreeBSD-SA-10:09.pseudofs.asc)");

 script_tag(name:"qod_type", value:"package");


 script_category(ACT_GATHER_INFO);

 script_copyright("Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com");
 script_family("FreeBSD Local Security Checks");
 script_dependencies("gather-package-list.nasl");
 script_mandatory_keys("ssh/login/freebsdpatchlevel", "login/SSH/success");
 script_tag(name : "insight" , value : tag_insight);
 script_tag(name : "solution" , value : tag_solution);
 script_tag(name : "summary" , value : tag_summary);
 exit(0);
}

#
# The script code starts here
#

include("pkg-lib-bsd.inc");
vuln = 0;
if(patchlevelcmp(rel:"7.1", patchlevel:"15")<0) {
    vuln = 1;
}

if(vuln) {
    security_message(0);
} else if (__pkg_match) {
    exit(99); # Not vulnerable.
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation