PT-2004-1524 · Freebsd+1 · Freebsd+1

Publicado 2004-04-06 · Atualizado 2017-07-11 · CVE-2004-0370

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD version 5.2

Description The issue is related to the setsockopt call in the KAME Project IPv6 implementation. It does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.

Recommendations For FreeBSD version 5.2, update to a version that includes a fix for the setsockopt call issue in the KAME Project IPv6 implementation.

Correção

Identificadores relacionados

CVE-2004-0370

Produtos afetados

Freebsd

Kame Project Ipv6

Referências · 5

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc · Aviso do Fabricante
• http://secunia.com/advisories/11233 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15662 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0370 · Nota de Segurança
• http://securityfocus.com/bid/9992 · Nota