CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 6.6
CWE Name:  Resource Management Errors
Summary: the ufs_lookup function in the mac os x 10.4.8 and freebsd 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by mounting a crafted unix file system (ufs) dmg image that contains a corrupted directory entry (struct direct), related to the ufs_dirbad function.  note: a third party states that the freebsd issue does not cross privilege boundaries.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/COMPLETE/COMPLETE
Published Date: 2007-01-17
Last Modified Date: 2011-06-10