ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions.
References
Link | Resource |
---|---|
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:13.ipfw.asc | Vendor Advisory |
Configurations
Information
Published : 2005-07-04 21:00
Updated : 2008-09-05 13:50
NVD link : CVE-2005-2019
Mitre link : CVE-2005-2019
JSON object : View
CWE
Products Affected
freebsd
- freebsd