Test ID:	1.3.6.1.4.1.25623.1.0.52643
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Security Advisory (FreeBSD-SA-04:01.mksnap_ffs.asc)
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-04:01.mksnap_ffs.asc
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:01.mksnap_ffs.asc Vulnerability Insight: Mounted filesystems can have a variety of flags set on them. Some flags affect performance and reliability, while others enable or disable particular security-related features such as the ability to execute a binary stored on the filesystem or the use of access control lists to complement normal Unix file permissions. The mksnap_ffs(8) command creates a `snapshot' of a filesystem. A `snapshot' is a static representation of the state of the filesystem at a particular point in time. Snapshots have a variety of uses, but their primary purpose is to make it possible to run fsck(8) and dump(8) on live filesystems. The kernel interface for creating a snapshot of a filesystem is the same as that for changing the flags on that filesystem. Due to an oversight, the mksnap_ffs(8) command called that interface with only the snapshot flag set, causing all other flags to be reset to the default value. Solution: Upgrade your system to the appropriate stable release or security branch dated after the correction date. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0099 BugTraq ID: 9533 http://www.securityfocus.com/bid/9533 FreeBSD Security Advisory: FreeBSD-SA-04:01 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:01.mksnap_ffs.asc http://www.osvdb.org/3790 XForce ISS Database: freebsd-mksnapffs-bypass-security(15005) https://exchange.xforce.ibmcloud.com/vulnerabilities/15005
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.