Vulnerabilities have been reported in FreeBSD, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or gain knowledge of sensitive information.

The vulnerabilities are caused due to missing input validation of the "uio" offset parameter in the process file system (procfs) and Linux process file system (linprocfs). These can be exploited by specifying an extremely large or negative value as an offset.

Successful exploitation results in a kernel panic or discloses a larger portion of kernel memory.

Solution
Update to one of the following releases or apply patch:
Further details available to Secunia VIM customers

Provided and/or discovered by
Joost Pol

Original Advisory
Pine Digital Security Advisory:
http://www.pine.nl/press/pine-cert-20030902.txt

FreeBSD Advisory:
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-03%3A17.procfs.asc

Deep Links
Links available to Secunia VIM customers