The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/42200 | Broken Link Vendor Advisory |
| http://security.FreeBSD.org/advisories/FreeBSD-SA-10:09.pseudofs.asc | Vendor Advisory |
| http://www.securitytracker.com/id?1024724 | Broken Link Third Party Advisory VDB Entry |
| http://www.vupen.com/english/advisories/2010/2956 | Broken Link Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/63218 | Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/15206/ | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
15 Feb 2024, 20:28
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 7.8 |
| CWE | CWE-667 | |
| CPE | cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:* |
cpe:2.3:o:freebsd:freebsd:8.0:p2:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:8.0:p5:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:8.0:p4:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:8.0:p1:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:8.0:p6:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:8.0:p3:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:* |
| References | () http://secunia.com/advisories/42200 - Broken Link, Vendor Advisory | |
| References | () http://security.FreeBSD.org/advisories/FreeBSD-SA-10:09.pseudofs.asc - Vendor Advisory | |
| References | () http://www.securitytracker.com/id?1024724 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.vupen.com/english/advisories/2010/2956 - Broken Link, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/63218 - Third Party Advisory, VDB Entry | |
| References | () https://www.exploit-db.com/exploits/15206/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2010-11-22 12:54
Updated : 2024-02-15 20:28
NVD link : CVE-2010-4210
Mitre link : CVE-2010-4210
CVE.ORG link : CVE-2010-4210
JSON object : View
Products Affected
freebsd
- freebsd
CWE
CWE-667
Improper Locking