CVE-2013-2171
FreeBSD 9 Address Space Manipulation Privilege Escalation
Title source: metasploitDescription
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalfreebsd
https://www.exploit-db.com/exploits/26454
nomisec
WORKING POC
1 stars
by 0xGabe · poc
https://github.com/0xGabe/FreeBSD-9.0-9.1-Privilege-Escalation
metasploit
WORKING POC
GREAT
by Konstantin Belousov, Alan Cox, Hunger, sinn3r · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/local/mmap.rb
Scores
EPSS
0.2417
EPSS Percentile
96.1%
Details
CWE
CWE-264
Status
published
Products (2)
freebsd/freebsd
9.0
freebsd/freebsd
9.1 (2 CPE variants)
Published
Jul 02, 2013
Tracked Since
Feb 18, 2026