----------------------------------------------------------------------



Accurate Vulnerability Scanning
No more false positives, no more false negatives

http://secunia.com/vulnerability_scanning/



----------------------------------------------------------------------

TITLE:
FreeBSD ZFS Intent Log "setattr" Transaction Replay Weakness

SECUNIA ADVISORY ID:
SA38124

VERIFY ADVISORY:
http://secunia.com/advisories/38124/

DESCRIPTION:
FreeBSD has acknowledged a weakness in ZFS, which can be exploited by
malicious, local users to disclose potentially sensitive information
or potentially gain escalated privileges.

The weakness is caused due to the ZFS Intent Log ("ZIL") replay
mechanism using insecure file permission defaults for the "setattr"
transaction, which could result in a file mode change to 07777 if
certain transactions are replayed after e.g. a system crash or power
outage.

SOLUTION:
Update FreeBSD or apply patches. Verify correct file permissions (see
vendor advisory for details).

2009-11-14 11:59:59 UTC (RELENG_8, 8.0-STABLE)
2010-01-06 21:45:30 UTC (RELENG_8_0, 8.0-RELEASE-p2)
2010-01-06 21:45:30 UTC (RELENG_7, 7.2-STABLE)
2010-01-06 21:45:30 UTC (RELENG_7_2, 7.2-RELEASE-p6)
2010-01-06 21:45:30 UTC (RELENG_7_1, 7.1-RELEASE-p10)

FreeBSD 7.x:
http://security.FreeBSD.org/patches/SA-10:03/zfs712.patch.asc

FreeBSD 8.0:
http://security.FreeBSD.org/patches/SA-10:03/zfs.patch.asc

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
FreeBSD-SA-10:03.zfs:
http://security.freebsd.org/advisories/FreeBSD-SA-10:03.zfs.asc

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------