PT-2005-1682 · Openbsd · Openbsd

Publicado 2005-03-04 · Atualizado 2017-07-11 · CVE-2005-0637

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.5 through 3.6

Description The issue concerns the copy functions, such as copyout, in the locore.s file, which may allow attackers to exceed certain address boundaries and modify kernel memory. This could potentially be applicable to other BSD-based operating systems.

Recommendations For OpenBSD versions 3.5 and 3.6, consider applying a patch or fix to the copy functions in locore.s to prevent attackers from modifying kernel memory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0637

Produtos afetados

Openbsd

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/19531 · Nota
• http://secunia.com/advisories/14432 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0637 · Nota de Segurança
• http://openbsd.org/errata35.html#locore · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/12825 · Correção
• http://securitytracker.com/id?1013333 · Aviso do Fabricante
• http://openbsd.org/errata.html#copy · Aviso do Fabricante