CVE-2008-5736

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/50936Broken Link
http://secunia.com/advisories/33209Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.ascVendor Advisory
http://securityreason.com/securityalert/8124Third Party Advisory
http://www.exploit-db.com/exploits/16951Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/32976Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1021491Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/47570VDB Entry
https://www.exploit-db.com/exploits/7581Third Party Advisory, VDB Entry
http://osvdb.org/50936Broken Link
http://secunia.com/advisories/33209Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.ascVendor Advisory
http://securityreason.com/securityalert/8124Third Party Advisory
http://www.exploit-db.com/exploits/16951Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/32976Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1021491Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/47570VDB Entry
https://www.exploit-db.com/exploits/7581Third Party Advisory, VDB Entry

Timeline

Published: Dec 26, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-57377.5SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands vi CVE-2008-57387.5Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumC CVE-2008-57397.5SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the u CVE-2008-57424.0Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and c CVE-2008-57436.9pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary fil CVE-2008-57447.2Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite a CVE-2008-57454.3Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, CVE-2008-57466.9Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink a CVE-2008-57475.0F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that CVE-2008-57488.1Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files vi CVE-2008-57496.8Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the CVE-2008-57506.8Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary comm