製品・ソフトウェアに関する情報

JVN脆弱性詳細

FreeBSD における権限を取得される脆弱性

Title	FreeBSD における権限を取得される脆弱性
Summary	FreeBSD には、(1) netgraph および (2) bluetooth ソケットに対して関数ポインタが適切に初期化されないため、権限を取得される脆弱性が存在します。
Possible impacts	ローカルユーザにより、権限を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Dec. 23, 2008, midnight
Registration Date	June 26, 2012, 4:03 p.m.
Last Update	June 26, 2012, 4:03 p.m.

Affected System

FreeBSD

FreeBSD 5.3 6.4-STABLE 未満の 6、6.3-RELEASE-p7 未満の 6.3、6.4-RELEASE-p1 未満の 6.4、7.0-RELEASE-p7 未満の 7.0、7.1-RC2 未満の 7.1、および 7.1-PRERELEASE 未満の 7

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2008-5736	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5736
National Vulnerability Database (NVD)
2	CVE-2008-5736	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5736

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
FreeBSD
1	FreeBSD-SA-08:13.protosw	http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc

Change Log

No	Changed Details	Date of change
0	[2012年06月26日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2008-5736

Summary	Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.
Summary	Múltiples vulnerabilidades sin especificar en FreeBSD 6 antes de 6.4-STABLE, 6.3 antes de 6.3-RELEASE-p7, 6.4 antes de 6.4-RELEASE-p1, 7.0 antes de 7.0-RELEASE-p7, 7.1 antes de 7.1-RC2 y 7 antes de 7.1-PRERELEASE permite a usuarios locales obtener privilegios mediante vectores de ataque desconocidos relacionados con punteros de funciones que "no están correctamente inicializados" para sockets(1) netgraph y (2) bluetooth.
Publication Date	Dec. 27, 2008, 3:30 a.m.
Registration Date	Jan. 29, 2021, 1:47 p.m.
Last Update	April 23, 2026, 9:35 a.m.

Affected software configurations

Related information, measures and tools

No	URL	refsource
1	http://osvdb.org/50936	cve@mitre.org
2	http://secunia.com/advisories/33209	cve@mitre.org
3	http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc	cve@mitre.org
4	http://securityreason.com/securityalert/8124	cve@mitre.org
5	http://www.exploit-db.com/exploits/16951	cve@mitre.org
6	http://www.securityfocus.com/bid/32976	cve@mitre.org
7	http://www.securitytracker.com/id?1021491	cve@mitre.org
8	https://exchange.xforce.ibmcloud.com/vulnerabilities/47570	cve@mitre.org
9	https://www.exploit-db.com/exploits/7581	cve@mitre.org
10	http://osvdb.org/50936	af854a3a-2127-422b-91ae-364da2661108
11	http://secunia.com/advisories/33209	af854a3a-2127-422b-91ae-364da2661108
12	http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc	af854a3a-2127-422b-91ae-364da2661108
13	http://securityreason.com/securityalert/8124	af854a3a-2127-422b-91ae-364da2661108
14	http://www.exploit-db.com/exploits/16951	af854a3a-2127-422b-91ae-364da2661108
15	http://www.securityfocus.com/bid/32976	af854a3a-2127-422b-91ae-364da2661108
16	http://www.securitytracker.com/id?1021491	af854a3a-2127-422b-91ae-364da2661108
17	https://exchange.xforce.ibmcloud.com/vulnerabilities/47570	af854a3a-2127-422b-91ae-364da2661108
18	https://www.exploit-db.com/exploits/7581	af854a3a-2127-422b-91ae-364da2661108

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html