FreeBSD / Mac OS X integer overflow
Published:		24.03.2009
Source:		BUGTRAQ
SecurityVulns ID:		9766
Type:		local
Level:		7/10
Description:		Integer overflow in kernel space on process timers.

Affected:		FREEBSD : FreeBSD 7.0
		FREEBSD : FreeBSD 7.1
		FREEBSD : FreeBSD 7.2
CVE:		CVE-2009-1041 (The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.)

Original document		mu-b, [Full-disclosure] FreeBSD/OS X kernel bug dump (24.03.2009)
		FREEBSD, FreeBSD Security Advisory FreeBSD-SA-09:06.ktimer (24.03.2009)

Files:		FreeBSD >= 7.0 local kernel root exploit
		Apple MACOS X 792.0 <= xnu <= 1228.x local kernel root exploit
		Apple MACOS X 792.0 <= xnu <= 1228.x local kernel root exploit
Discuss:		Read or add your comments to this news (0 comments)