CVE-2014-3001

Published: May 2, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process.

Affected (1)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 10.0

Related CWEs

CWE-264

References (6)

http://www.freebsd.org/security/advisories/FreeBSD-SA-14:07.devfs.asc

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/67158

Source: cve@mitre.org

http://www.securitytracker.com/id/1030171

Source: cve@mitre.org

http://www.freebsd.org/security/advisories/FreeBSD-SA-14:07.devfs.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/67158

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030171

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.