FreeBSD devfs protection bypass

Jailed processes are not restricted in devfs access...

FreeBSD Security Advisory FreeBSD-SA-14:07.devfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:07.devfs Security Advisory The FreeBSD Project Topic: devfs rules not applied by default for jails Category: core Module: etcrc.d Announced: 2014-04-30...

FreeBSD-SA-14:07.devfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:07.devfs Security Advisory The FreeBSD Project Topic: devfs rules not applied by default for jails Category: core Module: etcrc.d Announced: 2014-04-30...

FreeBSD -- devfs rules not applied by default for jails

Problem Description: The default devfs rulesets are not loaded on boot, even when jails are used. Device nodes will be created in the jail with their normal default access permissions, while most of them should be hidden and inaccessible. Impact: Jailed processes can get access to restricted...

CVE-2013-3797

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS...

CVE-2013-3797

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS...

CVE-2013-3797

CVE-2013-3797 is described as an unspecified local-privilege/availability issue in Oracle Solaris 11 affecting the Filesystem/DevFS component. The connected Nessus/NASL entry indicates this CVE is included in the July 2013 Oracle CPU SRU11_1_9_5_1 bundle along with CVEs 2013-3748 and 2013-3753, i...

PT-2013-4636

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue affects the availability of the system, related to Filesystem/DevFS, and can be exploited by local users via unknown vectors. Recommendations For Oracle Solaris version 11, at the moment, there i...

CVE-2013-3797: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS...

[SECURITY] Fedora 13 Update: udev-153-5.fc13

The udev package contains an implementation of devfs in userspace using sysfs and netlink...

FreeBSD 7.2 VFS/devfs race condition exploit

No description provided by source. FreeBSD 7.2 and below including 6.4 are vulnerable to race condition in VFS and devfs code, resulting in NULL pointer dereference. In contrast to pipe race condition, this vulnerability is actually much harder to exploit. Due to uninitalised value in devfsopen,...

FreeBSD 7.2 VFS/devfs race condition exploit

FreeBSD 7.2 and below including 6.4 are vulnerable to race condition in VFS and devfs code, resulting in NULL pointer dereference. In contrast to pipe race condition, this vulnerability is actually much harder to exploit. Due to uninitalised value in devfsopen, following function is called with...

FreeBSd race conditions (devfs)

Race conditions between devfs and VFS allow code execution...

FreeBSD 7.2 devfs Race Condition

if 0 FreeBSD 7.2 and below including 6.4 are vulnerable to race condition in VFS and devfs code, resulting in NULL pointer dereference. In contrast to pipe race condition, this vulnerability is actually much harder to exploit. Due to uninitalised value in devfsopen, following function is called...

FreeBSD 7.2 VFS/devfs race condition exploit

Exploit for unknown platform in category local exploits ============================================ FreeBSD 7.2 VFS/devfs race condition exploit ============================================ Title: FreeBSD 7.2 VFS/devfs race condition exploit CVE-ID: OSVDB-ID: Author: Przemyslaw Frasunek Publishe...

FreeBSD 7.2 - VFS/devfs Race Condition

if 0 FreeBSD 7.2 and below including 6.4 are vulnerable to race condition in VFS and devfs code, resulting in NULL pointer dereference. In contrast to pipe race condition, this vulnerability is actually much harder to exploit. Due to uninitalised value in devfsopen, following function is called...

FreeBSD Security Advisory (FreeBSD-SA-09:14.devfs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:14.devfs.asc ADV FreeBSD-SA-09:14.devfs.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:14.devfs.asc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

FreeBSD Security Advisory (FreeBSD-SA-09:14.devfs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:14.devfs.asc SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory FreeBSD-SA-09:14.devfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:14.devfs Security Advisory The FreeBSD Project Topic: Devfs / VFS NULL pointer race condition Category: core Module: kern Announced: 2009-10-02 Credits:...