CVE-2004-0125

Published: Aug 6, 2004Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.

Affected (42)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.0
Freebsd Freebsd	Version 4.0 alpha
Freebsd Freebsd	Version 4.0 releng
Freebsd Freebsd	Version 4.1.1
Freebsd Freebsd	Version 4.1.1 release
Freebsd Freebsd	Version 4.1.1 stable
Freebsd Freebsd	Version 4.10
Freebsd Freebsd	Version 4.1
Freebsd Freebsd	Version 4.2
Freebsd Freebsd	Version 4.2 stable
Freebsd Freebsd	Version 4.3
Freebsd Freebsd	Version 4.3 release
Freebsd Freebsd	Version 4.3 release_p38
Freebsd Freebsd	Version 4.3 releng
Freebsd Freebsd	Version 4.3 stable
Freebsd Freebsd	Version 4.4
Freebsd Freebsd	Version 4.4 release_p42
Freebsd Freebsd	Version 4.4 releng
Freebsd Freebsd	Version 4.4 stable
Freebsd Freebsd	Version 4.5
Freebsd Freebsd	Version 4.5 release
Freebsd Freebsd	Version 4.5 release_p32
Freebsd Freebsd	Version 4.5 releng
Freebsd Freebsd	Version 4.5 stable
Freebsd Freebsd	Version 4.6.2
Freebsd Freebsd	Version 4.6
Freebsd Freebsd	Version 4.6 release
Freebsd Freebsd	Version 4.6 release_p20
Freebsd Freebsd	Version 4.6 releng
Freebsd Freebsd	Version 4.6 stable
Freebsd Freebsd	Version 4.7
Freebsd Freebsd	Version 4.7 release
Freebsd Freebsd	Version 4.7 release_p17
Freebsd Freebsd	Version 4.7 releng
Freebsd Freebsd	Version 4.7 stable
Freebsd Freebsd	Version 4.8
Freebsd Freebsd	Version 4.8 pre-release
Freebsd Freebsd	Version 4.8 release_p6
Freebsd Freebsd	Version 4.8 releng
Freebsd Freebsd	Version 4.9
Freebsd Freebsd	Version 4.9 pre-release
Freebsd Freebsd	Version 4.9 releng

References (6)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc (unsafe URL)

Source: cve@mitre.org

http://www.securityfocus.com/bid/10485

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16342

Source: cve@mitre.org

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10485

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16342

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.