CVE-2010-2693

FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local users to cause a denial of service (system file corruption) and gain privileges via the sendfile system call.

Score

CVSS 2.0 7.2 High

Status

Modified - secteam@freebsd.org

Published

2010-07-13

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Freebsd (Freebsd)

References

• http://secunia.com/advisories/40567
• http://security.freebsd.org/advisories/FreeBSD-SA-10:07.mbuf.asc
• http://www.securityfocus.com/bid/41577
• http://www.securitytracker.com/id?1024182
• http://www.vupen.com/english/advisories/2010/1787