CVE-2011-4062

FreeBSD 7.3-9.0-RC1 - Buffer Overflow via Long UNIX Socket Pathname in bind System Call

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-4062. PoCs published by Shaun Colley.

AI-analyzed exploit summary This exploit demonstrates a heap overflow in FreeBSD's Unix domain sockets (CVE-2011-4062) by creating a server and client that manipulate the `sun_path` field to trigger a kernel panic or UID modification. The PoC loops the client to increase the likelihood of a crash.

Description

Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or possibly gain privileges via a bind system call with a long pathname for a UNIX socket.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Shaun Colley · bashdosfreebsd
https://www.exploit-db.com/exploits/17908

This exploit demonstrates a heap overflow in FreeBSD's Unix domain sockets (CVE-2011-4062) by creating a server and client that manipulate the `sun_path` field to trigger a kernel panic or UID modification. The PoC loops the client to increase the likelihood of a crash.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Racy
Target: FreeBSD 8.2-RELEASE
No auth needed
Prerequisites: Access to a vulnerable FreeBSD system · Ability to compile and execute C code
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2325
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46202
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/17908
Vendor Advisory vendor-advisory x_refsource_freebsd
http://security.freebsd.org/advisories/FreeBSD-SA-11:05.unix.asc
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46564
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026106
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/75788
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/49862

Scores

EPSS 0.0093
EPSS Percentile 55.9%

Details

CWE
CWE-119
Status published
Products (5)
freebsd/freebsd 7.3
freebsd/freebsd 7.4
freebsd/freebsd 8.1
freebsd/freebsd 8.2
freebsd/freebsd 9.0 beta1 (3 CPE variants)
Published Oct 18, 2011
Tracked Since Feb 18, 2026