CVE-2008-5736

Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.

• CWE-264

• http://osvdb.org/50936Broken Link
• http://secunia.com/advisories/33209Vendor Advisory
• http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.ascVendor Advisory
• http://securityreason.com/securityalert/8124Third Party Advisory
• http://www.exploit-db.com/exploits/16951Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/32976Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021491Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47570VDB Entry
• https://www.exploit-db.com/exploits/7581Third Party Advisory, VDB Entry
• http://osvdb.org/50936Broken Link
• http://secunia.com/advisories/33209Vendor Advisory
• http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.ascVendor Advisory
• http://securityreason.com/securityalert/8124Third Party Advisory
• http://www.exploit-db.com/exploits/16951Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/32976Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021491Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47570VDB Entry
• https://www.exploit-db.com/exploits/7581Third Party Advisory, VDB Entry

Published

Dec 26, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5730Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 …
• CVE-2008-5731The PGPwded device driver (aka PGPwded.sys) in PGP Corporati…
• CVE-2008-5732Unrestricted file upload vulnerability in lib/image_upload.p…
• CVE-2008-5733SQL injection vulnerability in blog.php in the Team Impact T…
• CVE-2008-5734Cross-site scripting (XSS) vulnerability in WebMail Pro in I…
• CVE-2008-5735Stack-based buffer overflow in skin.c in CoolPlayer 2.17 thr…
• CVE-2008-5737SQL injection vulnerability in index.php in Nodstrum MySQL C…
• CVE-2008-5738Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers …
• CVE-2008-5739SQL injection vulnerability in evb/check_url.php in Pligg CM…
• CVE-2008-5742Multiple open redirect vulnerabilities in AIST NetCat 3.12 a…
• CVE-2008-5743pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup fi…
• CVE-2008-5744Array index error in the dahdi/tor2.c driver in Zaptel (aka …