Unverified Jail System Call Vulnerability in FreeBSD 4.x

CVE-2004-0125

The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.

Learn more about our User Device Pen Test.