Vulnerability Database

290,301

Total vulnerabilities in the database

CVE-2008-5736

Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.

  • Published: Dec 26, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-5736
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
freebsd / freebsd 7.1-rc1 7.1-rc1.x
freebsd / freebsd 6.3 6.3.x
freebsd / freebsd 6.3-p1 6.3-p1.x
freebsd / freebsd 6.3-p2 6.3-p2.x
freebsd / freebsd 6.3-p3 6.3-p3.x
freebsd / freebsd 6.3-p4 6.3-p4.x
freebsd / freebsd 6.3-p5 6.3-p5.x
freebsd / freebsd 6.3-p6 6.3-p6.x
freebsd / freebsd 6.4 6.4.x
freebsd / freebsd 7.0 7.0.x
freebsd / freebsd 7.0-p1 7.0-p1.x
freebsd / freebsd 7.0-p3 7.0-p3.x
freebsd / freebsd 7.0-p4 7.0-p4.x
freebsd / freebsd 7.0-p5 7.0-p5.x
freebsd / freebsd 7.0-p6 7.0-p6.x
freebsd / freebsd 7.1 7.1.x
freebsd / freebsd 6.0 6.0.x