vulnerability
FreeBSD: VID-e7dcd69d-8ee6-11e6-a590-14dae9d210b8: FreeBSD -- Multiple portsnap vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Oct 10, 2016 | Nov 14, 2016 | Dec 10, 2025 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 10, 2016
Added
Nov 14, 2016
Modified
Dec 10, 2025
Description
Problem Description: Flaws in portsnap's verification of downloaded tar files allows additional files to be included without causing the verification to fail. Portsnap may then use or execute these files. Impact: An attacker who can conduct man in the middle attack on the network at the time when portsnap is run can cause portsnap to execute arbitrary commands under the credentials of the user who runs portsnap, typically root.
Solutions
freebsd-upgrade-base-11_0-release-p1freebsd-upgrade-base-10_3-release-p10freebsd-upgrade-base-10_2-release-p23freebsd-upgrade-base-10_1-release-p40freebsd-upgrade-base-9_3-release-p48
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.