CVE-2005-2218

The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*

History

20 Nov 2024, 23:59

Type Values Removed Values Added
References () ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc - () ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc -
References () http://secunia.com/advisories/16145 - () http://secunia.com/advisories/16145 -
References () http://securitytracker.com/id?1014536 - () http://securitytracker.com/id?1014536 -
References () http://www.osvdb.org/18123 - () http://www.osvdb.org/18123 -
References () http://www.securityfocus.com/bid/14334 - () http://www.securityfocus.com/bid/14334 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/21451 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/21451 -

Information

Published : 2005-07-26 04:00

Updated : 2024-11-20 23:59


NVD link : CVE-2005-2218

Mitre link : CVE-2005-2218

CVE.ORG link : CVE-2005-2218


JSON object : View

Products Affected

freebsd

  • freebsd