Description
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
References
- freebsd-jailed-table-modify(16342) vdb-entry
- 10485 vdb-entry