FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0125

This CVE name corresponds to:

Entered	Topic
2004-06-07	jailed processes can manipulate host routing tables

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0125 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0125
Phase	Assigned(20040203)

Description

The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.

References

Source	Reference
FREEBSD	FreeBSD-SA-04:12
BID	10485
XF	freebsd-jailed-table-modify(16342)