A vulnerability has been reported in FreeBSD, which can be exploited by malicious, local users to disclose potentially sensitive information.

The vulnerability is caused due to an integer overflow within the implementation of "direct pipe writes", which can lead to virtual-to-physical address lookups being skipped. This can be exploited to e.g. disclose memory parts of other processes.

Solution
Update FreeBSD or apply patches.
Further details available in Customer Area

Provided and/or discovered by
Pieter de Boer

Changelog
Further details available in Customer Area

Original Advisory
FreeBSD-SA-09:09.pipe:
http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc

Deep Links
Links available in Customer Area