Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key), which allows local users to obtain sensitive key information by reading the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD 信息泄露漏洞
Vulnerability Description
FreeBSD是由Core Team团队负责的FreeBSD项目中的一套类Unix自由操作系统，是经过BSD、386BSD和4.4BSD发展而来的类Unix的一个重要分支。 FreeBSD 10.1及之前版本的bsdinstall安装程序中存在安全漏洞，该漏洞源于当程序配置具有全磁盘加密功能的ZFS时，为GELI密钥文件（/boot/encryption.key）分配全局可读权限。本地攻击者可通过读取文件利用该漏洞获取敏感的密钥信息。
CVSS Information
N/A
Vulnerability Type
N/A