The addprobe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /sndpcm none /" command.
{ "binaries": [ { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-dbgsym" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-initramfs" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-initramfs-dbgsym" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-static" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-static-dbgsym" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-syslogd" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-udeb" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "busybox-udeb-dbgsym" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "udhcpc" }, { "binary_version": "1:1.21.0-1ubuntu1.4", "binary_name": "udhcpd" } ], "availability": "No subscription required" }