• info
• discussion
• exploit
• solution
• references

FreeBSD Kernel SIOCGIFCONF Local Information Disclosure Vulnerability

Solution:
FreeBSD has released advisory FreeBSD-SA-05:04 along with patches dealing with this issue.


FreeBSD FreeBSD 4.0 -RELENG

• FreeBSD ifconf4.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:04/ifconf4.patch

FreeBSD FreeBSD 4.10 -RELENG

• FreeBSD ifconf4.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:04/ifconf4.patch

FreeBSD FreeBSD 4.11 -STABLE

• FreeBSD ifconf4.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:04/ifconf4.patch

FreeBSD FreeBSD 5.3

• FreeBSD ifconf5.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:04/ifconf5.patch

FreeBSD FreeBSD 5.3 -RELEASE

• FreeBSD ifconf5.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:04/ifconf5.patch

FreeBSD FreeBSD 5.3 -RELENG

• FreeBSD ifconf5.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:04/ifconf5.patch