Vulnerability in Freebsd

CVE-2001-0061

procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's address space.

EPSS: 0.004 (29.4th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 3.5.1, 4.1, 4.1.1
  • N/a — versions n/a

References