FreeBSD contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when an error occurs in wump during the handling of a local environment variable. This may allow a local attacker to gain escalated root privileges.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Workaround
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
OSVDB:
Authentication Required
Solution
Currently, there are no known upgrades or patches to correct this vulnerability. It is possible to temporarily work around the flaw by implementing the following workaround: reduce privileges on wump.
