CVE-2009-0641 sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote a...
HighCVSS 9.3
EPSS 9.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client, as demonstrated by an LD_PRELOAD value that references a malicious library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | = 7.0 | No fix listed |
| freebsd | = 7.0-beta_4 | No fix listed |
| freebsd | = 7.0-current | No fix listed |
| freebsd | = 7.0-release | No fix listed |
| freebsd | = 7.0_beta4 | No fix listed |
| freebsd | = 7.0_releng | No fix listed |
| freebsd | = 7.1 | No fix listed |
| freebsd | = 7.1-rc1 | No fix listed |
References
- 20090214 FreeBSD zeroday exploit mailing-list
- FreeBSD-SA-09:05 patch vendor-advisory
- 33777 exploit vdb-entry
- freebsd-telnet-ldpreload-code-execution(48780) vdb-entry
- 8055 exploit