BSD systems securelevel protection bypass updated since 09.01.2006
Published:		10.01.2006
Source:		BUGTRAQ
SecurityVulns ID:		5609
Type:		local
Level:		5/10
Description:		By mounting different filesystem it's possible to mask file flagged 'immutable'. It's possible to rollback system tiime by setting it to maximum value.

Affected:		NETBSD : NetBSD 1.6
		LINUX : kernel 2.6
		NETBSD : NetBSD 2.0
		FREEBSD : FreeBSD 6.0
		FREEBSD : FreeBSD 7.0
		DRAGONFLY : DragonFly 1.2
		NETBSD : NetBSD 2.1

Original document		NETBSD, NetBSD Security Advisory 2006-002: settimeofday() time wrap (10.01.2006)
		RedTeam Pentesting, [Full-disclosure] Time modification flaw in BSD securelevels on NetBSD and Linux (09.01.2006)
		RedTeam Pentesting, [Full-disclosure] BSD Securelevels: Circumventing protection of files flagged immutable (09.01.2006)

Discuss:

Read or add your comments to this news (0 comments)