medium6.2Public exploit code
CVE-2001-1185
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeBSD 4.4 - AIO Library Cross Process Memory Write2001-12-10 · local · freebsd · Verified
Impact
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | Version 4.4 |
References
- NVD record
- CVE.org record
- http://www.iss.net/security_center/static/7693.php
- http://www.osvdb.org/2001
- http://www.securityfocus.com/archive/1/244583
- http://www.securityfocus.com/bid/3661
- http://www.iss.net/security_center/static/7693.php
- http://www.osvdb.org/2001
- http://www.securityfocus.com/archive/1/244583
- http://www.securityfocus.com/bid/3661