Total vulnerabilities in the database
The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.
| Software | From | Fixed in |
|---|---|---|
| freebsd / freebsd | 5.1-release | 5.1-release.x |
| freebsd / freebsd | 5.1 | 5.1.x |
| freebsd / freebsd | 5.2 | 5.2.x |
| freebsd / freebsd | 5.2.1-release | 5.2.1-release.x |