Privilege Escalation via jail_attach System Call in FreeBSD 5.1 and 5.2

CVE-2004-0126 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.

Learn more about our User Device Pen Test.