VULNERABILITY INTELLIGENCE

CVE-2004-0126

CVSS score4.6 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2004-03-29
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.

Primary references