PT-2004-1600 · Openbsd · Openbsd

Christer Oberg + 1 · Publicado 2004-05-20 · Atualizado 2024-02-14 · CVE-2004-0482

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.5 and earlier

Description The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs subr.c. This allows local users to read sensitive kernel memory and possibly perform other unauthorized activities.

Recommendations For OpenBSD versions 3.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0482

Produtos afetados

Openbsd

Referências · 11

• https://nvd.nist.gov/vuln/detail/CVE-2004-0482 · Nota de Segurança
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch · Correção
• http://marc.info/?l=full-disclosure&m=108481812926420&w=2 · Nota
• http://openbsd.org/errata35.html · Aviso do Fabricante
• http://marc.info/?l=openbsd-security-announce&m=108445767103004&w=2 · Nota
• http://secunia.com/advisories/11605 · Nota
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch · Correção
• http://osvdb.org/6114 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16226 · Nota
• http://openbsd.org/errata34.html · Aviso do Fabricante
• http://deprotect.com/advisories/DEPROTECT-20041305.txt · Nota