CVE-2008-5736

Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.20% chance of exploitation in the next 30 days, 68th percentile

Published

2008-12-26

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.exploit-db.com/exploits/16951
• https://www.exploit-db.com/exploits/7581

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16951

Security advisories

• http://secunia.com/advisories/33209
• http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc
• http://securityreason.com/securityalert/8124
• http://www.securityfocus.com/bid/32976
• http://www.securitytracker.com/id?1021491

References

• CVE Record
• NVD entry