low2.1Public exploit code

CVE-2002-1125

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave op…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

WMNet2 1.0 6 - Kernel Memory File Descriptor Leakage2002-09-16 · local · freebsd · Verified
WMMon 1.0 b2 - Memory Character File Open File Descriptor Read2002-09-16 · local · freebsd · Verified
ASCPU 0.60 Kernel - Memory File Descriptor Leakage2002-09-16 · local · unix · Verified
BubbleMon 1.x Kernel - Memory File Descriptor Leakage2002-09-16 · local · unix · Verified

Impact

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.

Affected products

Vendor	Product	Affected versions
Freebsd	Freebsd	Versions 4.2, 4.3, 4.4, 4.5, 4.6

Public exploit code

Impact

Affected products

References