Test ID:	1.3.6.1.4.1.25623.1.0.52640
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Security Advisory (FreeBSD-SA-03:17.procfs.asc)
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-03:17.procfs.asc
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:17.procfs.asc Vulnerability Insight: The process file system, procfs(5), implements a view of the system process table inside the file system. It is normally mounted on /proc, and is required for the complete operation of programs such as ps(1) and w(1). The Linux process file system, linprocfs(5), emulates a subset of Linux's process file system and is required for the complete operation of some Linux binaries. The procfs and linprocfs implementations use uiomove(9) and the related `struct uio' in order to fulfill read and write requests. Several cases were identified where members of `struct uio' were not properly validated before being used. In particular, the `uio_offset' member may be negative or extremely large, and was used to compute the region of kernel memory to be returned to the user. Solution: Upgrade your system to the appropriate stable release or security branch dated after the correction date. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.