Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD jail()进程未授权路由表修改漏洞
Vulnerability Description
FreeBSD是一款免费开放源代码的UNIX操作系统。 FreeBSD没有正确允许jail()环境中的超级用户进程修改路由表，远程攻击者可以利用这个漏洞破坏路由表，对网络服务进行攻击等。 jail(2)系统调用允许系统管理员琐住进程并在限制的环境中运行，FreeBSD内核维护内部路由表来判断要传送数据的接口。这些路由表可以允许超级用户权限的用户进程通过在路由套接口上发送消息来更改。由于程序设计错误，在jail环境中的超级用户权限的进程可以发送路由表更改信息而操作路由表，可导致破坏服务器路由表，拒绝正常的网
CVSS Information
N/A
Vulnerability Type
N/A