| FreeBSD IPv6 "setsockopt()" Input Validation Vulnerability | |||
| Posted by: Jordi on Tuesday, March 30, 2004 - 08:05 PM | |||
 |
Katsuhisa ABE and Colin Percival have discovered a vulnerability in FreeBSD, which can be exploited by malicious, local users to gain knowledge of sensitive information or cause a DoS (Denial-of-Service). | ||
| The vulnerability is caused due to an input validation error within the "setsockopt()" system call when handling certain IPv6 socket options. This can be exploited to access portions of kernel memory. Complete information at Secunia. |
|||