CVE-2011-4062

FreeBSD - UIPC socket heap Overflow (PoC)

Severity Score

7.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or possibly gain privileges via a bind system call with a long pathname for a UNIX socket.

Desbordamiento de búfer en la "emulación de Linux" de apoyo en FreeBSD v7.3 y v7.4, v8.1 y v8.2, y v9 antes de v9.0-RC1 permite a usuarios locales provocar una denegación de servicio (pánico) y posiblemente ejecutar código arbitrario mediante una llamada al llamado sistema de vinculación con un largo camino para un socket UNIX-domain, que no se manipula correctamente, cuando la dirección es utilizada por otras llamadas al sistema no especificado.

Buffer overflow in the "linux emulation" support in FreeBSD kernel allows local users to cause a denial of service (panic) and possibly execute arbitrary code by calling the bind system call with a long path for a UNIX-domain socket, which is not properly handled when the address is used by other unspecified system calls.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-10-04 First Exploit
2011-10-15 CVE Reserved
2011-10-18 CVE Published
2024-08-06 CVE Updated
2025-06-18 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (10)

URL	Tag	Source
http://secunia.com/advisories/46564	Third Party Advisory
http://www.osvdb.org/75788	Vdb Entry
http://www.securityfocus.com/bid/49862	Vdb Entry
http://www.securitytracker.com/id?1026106	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/17908	2011-10-04
http://www.exploit-db.com/exploits/17908	2024-08-06

URL	Date	SRC
http://security.freebsd.org/patches/SA-11:05/unix2.patch	2011-12-13

URL	Date	SRC
http://secunia.com/advisories/46202	2011-12-13
http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc	2011-12-13
http://www.debian.org/security/2011/dsa-2325	2011-12-13

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				7.3 Search vendor "Freebsd" for product "Freebsd" and version "7.3"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				7.4 Search vendor "Freebsd" for product "Freebsd" and version "7.4"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				8.1 Search vendor "Freebsd" for product "Freebsd" and version "8.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				8.2 Search vendor "Freebsd" for product "Freebsd" and version "8.2"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				9.0 Search vendor "Freebsd" for product "Freebsd" and version "9.0"		beta1		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				9.0 Search vendor "Freebsd" for product "Freebsd" and version "9.0"		beta2		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				9.0 Search vendor "Freebsd" for product "Freebsd" and version "9.0"		beta3		Affected