FreeBSD Kernel nfs_mount() Exploit

Exploit for freebsd platform in category local exploits ================================== FreeBSD Kernel nfsmount Exploit ================================== / nfsmountex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. FreeBSD...

CVE-2010-2020: Improper Input Validation

sys/nfsclient/nfsvfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request...

CVE-2008-3531: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in sys/kern/vfsmount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted 1 mount or 2 nmount system call, related to copying of "user defined data" in "certain error conditions."...