Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2001-1180
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child..
CVSSv2.0 Score
- Severity
- High
- Base Score
- 7.2/10
- Exploit Score
- 3.9/10
- Access Vector
- Local
- Access Complexity
- Low
- Authentication Required
- None
- Impact Score
- 10/10
- Confidentiality Impact
- Complete
- Availability Impact
- Complete
- Integrity Impact
- Complete
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* |
Yes
|
- | - |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html
- http://www.securityfocus.com/bid/3007
- http://www.kb.cert.org/vuls/id/943633
- http://ciac.llnl.gov/ciac/bulletins/l-111.shtml
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:42.signal.v1.1.asc
- http://www.osvdb.org/1897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6829