Christian S.J. Peron has reported some vulnerabilities in FreeBSD, which can be exploited by malicious, local users to gain knowledge of potentially sensitive information.

The vulnerabilities are caused due to various errors in the kernel where variable-sized input is passed to applications in fixed-length buffers without zeroing the unused portion of the buffers.

Successful exploitation discloses random data in kernel memory.

Solution
Update FreeBSD or apply patch.
Further details available in Customer Area

Provided and/or discovered by
Christian S.J. Peron

Original Advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:08.kmem.asc

Deep Links
Links available in Customer Area