CVE Vulnerabilities

CVE-2002-1125

Published: Sep 24, 2002 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 4.2 (including) 4.2 (including)
Freebsd Freebsd 4.3 (including) 4.3 (including)
Freebsd Freebsd 4.4 (including) 4.4 (including)
Freebsd Freebsd 4.5 (including) 4.5 (including)
Freebsd Freebsd 4.6 (including) 4.6 (including)

References