CVE-2008-3531

FreeBSD 7.0-7.1 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1) mount or (2) nmount system call, related to copying of "user defined data" in "certain error conditions."

Exploits (2)

exploitdb WORKING POC VERIFIED

by Patroklos Argyroudis · clocalfreebsd

https://www.exploit-db.com/exploits/9082

View Code ZIP pw:eip

nomisec STUB

by test-one9 · poc

https://github.com/test-one9/ps4-11.50.github.io

View Code ZIP pw:eip

References (4)

[Various Sources] http://security.FreeBSD.org/advisories/FreeBSD-SA-08:08.nmount.asc

[Patch] http://www.securityfocus.com/bid/31002

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/45143

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1020816

Scores

EPSS 0.0029

EPSS Percentile 52.3%

Details

CWE

CWE-119

Status published

Products (2)

freebsd/freebsd 7.0

freebsd/freebsd 7.1

Published Sep 05, 2008

Tracked Since Feb 18, 2026