CVE-2001-0061

procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's address space.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2001-02-12

Last modified

2024-08-08

Affected products

• Freebsd (Freebsd)

References

• http://www.osvdb.org/1697
• http://www.securityfocus.com/bid/2130
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6106