CVE-2014-3001

The device file system aka devfs in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process...

Design/Logic Flaw

The device file system aka devfs in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process...

CVE-2014-3001

FreeBSD devfs: For FreeBSD 10.0 up to patch p2, default devfs rulesets are not loaded on boot, causing device nodes to be created in jails with normal default permissions. This enables jailed processes to access restricted host devices and could lead to information leakage or privilege escalation...

CVE-2014-3001

The device file system aka devfs in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process...

CVE-2014-3001

Removed by vendor...

CVE-2013-1766

libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors...

Scientific Linux Security Update : udev on SL5.x i386/x86_64

It was discovered that udev did not properly check the origin of Netlink messages. A local attacker could use this flaw to gain root privileges via a crafted Netlink message sent to udev, causing it to create a world-writable block device file for an existing system block device for example, the...

CVE-2009-0792

Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...

CVE-2009-0583

Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...

CVE-2009-0583

Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...

CVE-2007-5194

The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges...

CVE-2007-5194

The CVE-2007-5194 entry concerns the Chroot server in rMake 1.0.11. A local-priority issue arises because it creates a /dev/zero device file with read/write permissions for the rMake user and shares the minor device number with /dev/port, enabling potential local privilege escalation to root. The...

CVE-2005-2218

The CVE describes a DevFS (FreeBSD 5.x) flaw where insufficient parameter checking for the node type during device creation allows a user inside a jail to expose hidden device nodes. This can let jailed processes access restricted host devices, potentially leading to information leakage and privi...

FreeBSD-SA-05:17.devfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:17.devfs Security Advisory The FreeBSD Project Topic: devfs ruleset bypass Category: core Module: devfs Announced: 2005-07-20 Credits: Robert Watson Affects:...

602Pro Lansuite Denial Of Service 1.0.34

Advisory Name:Lansuite Webserver Denial of Service Discovered:8th and 23rd Of March 2001 Application:602Pro Lansuite 2000a 1.0.34 - prior versions and possibly 1.0.35 Platform:Windows 2k,95/98/NT - others unknown Severity:Denial of service from application Credit:[email protected] Vendor...

PT-1998-1105 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The issue allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system. Recommendations: At the moment, there is no...