Design/Logic Flaw

The vmmaplookup function in sys/vm/vmmap.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain...

CVE-2013-2171

The vmmaplookup function in sys/vm/vmmap.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain...

CVE-2013-2171

CVE-2013-2171 affects FreeBSD 9.0–9.1-RELEASE-p4 where vm_map_lookup in the mmap path may bypass write-permissions checks, enabling local privilege escalation via crafted mmap/ptrace usage. Exploitation details appear in public modules (Metasploit, CANVAS) and vendor advisories describe the fix i...