Description
The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process.
References
- 1030171 vdb-entry
- 67158 vdb-entry
- FreeBSD-SA-14:07 vendor-advisory