high7.8Public exploit code
CVE-2010-4210
The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeBSD - 'pseudofs' Null Pointer Dereference Privilege Escalation2010-10-04 · local · bsd · Verified
Impact
The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | from 7.0 before 7.3 Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/42200
- http://security.FreeBSD.org/advisories/FreeBSD-SA-10:09.pseudofs.asc
- http://www.securitytracker.com/id?1024724
- http://www.vupen.com/english/advisories/2010/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63218
- https://www.exploit-db.com/exploits/15206/
- http://secunia.com/advisories/42200
- http://security.FreeBSD.org/advisories/FreeBSD-SA-10:09.pseudofs.asc
- http://www.securitytracker.com/id?1024724
- http://www.vupen.com/english/advisories/2010/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63218
- https://www.exploit-db.com/exploits/15206/