PT-2002-1850 · Freebsd · Freebsd

Publicado 2002-08-12 · Atualizado 2016-10-18 · CVE-2002-0831

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 4.3 through 4.6 STABLE

Description: The issue allows local users to cause a denial of service, resulting in a kernel panic. This occurs when a pipe call is made where one end is terminated and an EVFILT WRITE filter is registered for the other end.

Recommendations: For FreeBSD versions 4.3 through 4.6 STABLE, consider restricting the use of the kqueue mechanism as a temporary workaround until a patch is available. Avoid using the EVFILT WRITE filter in conjunction with pipe calls where one end is terminated to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0831

Produtos afetados

Freebsd

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0831 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=102865142610126&w=2 · Aviso do Fabricante
• http://osvdb.org/5069 · Nota
• http://iss.net/security_center/static/9774.php · Nota
• http://securityfocus.com/bid/5405 · Nota