CVE-2008-5736

high

Description

Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that are "not properly initialized" for (1) netgraph sockets and (2) bluetooth sockets.

References

Advisories
More

https://www.exploit-db.com/exploits/7581

http://www.securitytracker.com/id?1021491

http://www.securityfocus.com/bid/32976

http://www.exploit-db.com/exploits/16951

http://securityreason.com/securityalert/8124

https://exchange.xforce.ibmcloud.com/vulnerabilities/47570

http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc

http://secunia.com/advisories/33209

Details

Source: Mitre, NVD

Published: 2008-12-26

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00314