CVE-2004-0099

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Mar 3, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-01034.6crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to CVE-2004-01047.5Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.CVE-2004-01057.5Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.CVE-2004-01067.2Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities t CVE-2004-01074.6The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temp CVE-2004-01084.6The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a d CVE-2004-01094.6Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to ove CVE-2004-01107.5Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execu CVE-2004-01115.0gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.CVE-2004-01125.0The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of CVE-2004-01135.0Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumptio CVE-2004-01144.6The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earli