PT-2000-1397 · Netbsd Foundation · Netbsd

Publicado 2000-05-28 · Atualizado 2008-09-10 · CVE-2000-0456

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions 1.4.2 and earlier

Description The issue allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU.

Recommendations For NetBSD versions 1.4.2 and earlier, consider restricting access to system calls that do not yield the CPU to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2000-0456

Produtos afetados

Netbsd

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0456 · Nota de Segurança
• ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-005.txt.asc · Nota
• http://osvdb.org/1365 · Nota
• http://securityfocus.com/bid/1272 · Nota