CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Numeric Errors
Summary: integer overflow in the ffs_mountfs function in freebsd 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted ufs filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function. note: a third party states that this issue does not cross privilege boundaries in freebsd because only root may mount a filesystem.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2006-11-03
Last Modified Date: 2011-10-11