vulnwire
2.1low

CVE-2002-11254 exploits

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
4
Exploit-DB

FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.

Exploit prediction (EPSS)

0.79% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

Exploits and detections

  • EDB-21799 WMNet2 1.0 6 - Kernel Memory File Descriptor Leakage · local · 2002-09-16
  • EDB-21798 WMMon 1.0 b2 - Memory Character File Open File Descriptor Read · local · 2002-09-16
  • EDB-21797 ASCPU 0.60 Kernel - Memory File Descriptor Leakage · local · 2002-09-16
  • EDB-21796 BubbleMon 1.x Kernel - Memory File Descriptor Leakage · local · 2002-09-16

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

References

  • marc.info /?l=bugtraq&m=103228135413310&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/5719 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /bid/5718 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /bid/5714 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/10109.php · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/5720 · vdb-entry, x_refsource_BID, x_transferred
  • archives.neohapsis.com /archives/vulnwatch/2002-q3/0115.html · mailing-list, x_refsource_VULNWATCH, x_transferred
  • securityfocus.com /bid/5716 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.