Vulnerability Details CVE-2005-2218
The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.6%
CVSS Severity
CVSS v2 Score 7.2
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc
- http://secunia.com/advisories/16145
- http://securitytracker.com/id?1014536
- http://www.osvdb.org/18123
- http://www.securityfocus.com/bid/14334
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21451
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc
- http://secunia.com/advisories/16145
- http://securitytracker.com/id?1014536
- http://www.osvdb.org/18123
- http://www.securityfocus.com/bid/14334
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21451
Products affected by CVE-2005-2218
-
cpe:2.3:o:freebsd:freebsd:5.0
-
cpe:2.3:o:freebsd:freebsd:5.1
-
cpe:2.3:o:freebsd:freebsd:5.2
-
cpe:2.3:o:freebsd:freebsd:5.2.1
-
cpe:2.3:o:freebsd:freebsd:5.3
-
cpe:2.3:o:freebsd:freebsd:5.4