Some vulnerabilities have been reported in FreeBSD, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

1) An error exist within the "ftruncate()" function when being used on certain file types. This can be exploited to cause a DoS by e.g. calling "ftruncate()" on a FIFO file.

2) FreeBSD permits unprivileged users to set the scheduler policy. This can be exploited to cause a DoS by e.g. setting the maximum priority for a process with large CPU usage.

Solution
Fixed in CVS.

Provided and/or discovered by
Disclosed in a CVS commit by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://lists.freebsd.org/pipermail/cvs-src/2006-May/063969.html
http://lists.freebsd.org/pipermail/cvs-src/2006-May/064488.html

Deep Links
Links available in Customer Area