CVE-2005-4351: Dragonfly

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.

Affected products

• Dragonfly Dragonfly: up to and including 1.2
• Freebsd Freebsd: up to and including 6.0; version 7.0 only
• Linux Linux Kernel: up to and including 2.6.15
• OpenBSD OpenBSD: up to and including 3.8

Published 2005-12-31. Last modified 2026-06-16.