SB2013092305 - Permissions, Privileges, and Access Controls in FreeBSD
Published: September 23, 2013 Updated: August 10, 2020
Security Bulletin ID
SB2013092305
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2013-5710)
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
The nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users with certain permissions to bypass access restrictions via a hardlink in a nullfs instance to a file in a different instance.
Remediation
Install update from vendor's website.