CVE-2004-0126: Freebsd

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.

Affected products

• Freebsd Freebsd: version 5.1 only; version 5.2 only; version 5.2.1 only

Published 2004-03-29. Last modified 2026-06-16.