CVE Vulnerabilities

CVE-2005-2218

Published: Jul 26, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 5.0 (including) 5.0 (including)
Freebsd Freebsd 5.0-alpha (including) 5.0-alpha (including)
Freebsd Freebsd 5.0-release_p14 (including) 5.0-release_p14 (including)
Freebsd Freebsd 5.0-releng (including) 5.0-releng (including)
Freebsd Freebsd 5.1 (including) 5.1 (including)
Freebsd Freebsd 5.1-alpha (including) 5.1-alpha (including)
Freebsd Freebsd 5.1-release (including) 5.1-release (including)
Freebsd Freebsd 5.1-release_p5 (including) 5.1-release_p5 (including)
Freebsd Freebsd 5.1-releng (including) 5.1-releng (including)
Freebsd Freebsd 5.2 (including) 5.2 (including)
Freebsd Freebsd 5.2.1 (including) 5.2.1 (including)
Freebsd Freebsd 5.2.1-release (including) 5.2.1-release (including)
Freebsd Freebsd 5.2.1-releng (including) 5.2.1-releng (including)
Freebsd Freebsd 5.3 (including) 5.3 (including)
Freebsd Freebsd 5.3-release (including) 5.3-release (including)
Freebsd Freebsd 5.3-releng (including) 5.3-releng (including)
Freebsd Freebsd 5.3-stable (including) 5.3-stable (including)
Freebsd Freebsd 5.4 (including) 5.4 (including)
Freebsd Freebsd 5.4-pre-release (including) 5.4-pre-release (including)
Freebsd Freebsd 5.4-release (including) 5.4-release (including)
Freebsd Freebsd 5.4-releng (including) 5.4-releng (including)
Kfreebsd-5 Ubuntu dapper *
Kfreebsd-5 Ubuntu devel *
Kfreebsd-5 Ubuntu edgy *
Kfreebsd-5 Ubuntu feisty *

References