CVE-2007-0166 in FreeBSD
Summary
The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted, which allows local root users to overwrite arbitrary files, or mount/unmount files, outside of the jail via a symlink attack.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
01/09/2007
Disclosure
01/11/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2829 | FreeBSD Jail rc.d privileges management | 269 | Not defined | Official fix | CVE-2007-0166 |