CVE-2004-0125
UnknownEPSS 0.34%
Last modified
CVE-2004-0125 is a vulnerability of currently unknown severity. The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | 4.0 |
| Freebsd | Freebsd | 4.1 |
| Freebsd | Freebsd | 4.1.1 |
| Freebsd | Freebsd | 4.2 |
| Freebsd | Freebsd | 4.3 |
| Freebsd | Freebsd | 4.4 |
| Freebsd | Freebsd | 4.5 |
| Freebsd | Freebsd | 4.6 |
| Freebsd | Freebsd | 4.6.2 |
| Freebsd | Freebsd | 4.7 |
| Freebsd | Freebsd | 4.8 |
| Freebsd | Freebsd | 4.9 |
| Freebsd | Freebsd | 4.10 |
References
- http://www.securityfocus.com/bid/10485Patch, Vendor Advisory
- http://www.securityfocus.com/bid/10485Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-0125?
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
How severe is CVE-2004-0125?
Severity scoring for CVE-2004-0125 is pending analysis. The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2004-0125?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-0119The Negotiate Security Software Provider (SSP) interface in …7.5
- CVE-2004-0120The Microsoft Secure Sockets Layer (SSL) library, as used in…
- CVE-2004-0121Argument injection vulnerability in Microsoft Outlook 2002 d…
- CVE-2004-0122Microsoft MSN Messenger 6.0 and 6.1 does not properly handle…
- CVE-2004-0123Double free vulnerability in the ASN.1 library as used in Wi…
- CVE-2004-0124The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, X…
- CVE-2004-0126The jail_attach system call in FreeBSD 5.1 and 5.2 changes t…
- CVE-2004-0127Directory traversal vulnerability in editconfig_gedcom.php f…
- CVE-2004-0128PHP remote file inclusion vulnerability in the GEDCOM config…
- CVE-2004-0129Directory traversal vulnerability in export.php in phpMyAdmi…
- CVE-2004-0130login.php in phpGedView 2.65 and earlier allows remote attac…
- CVE-2004-0131The rad_print_request function in logger.c for GNU Radius da…
Are you affected by CVE-2004-0125?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST