PT-2005-1747 · Freebsd · Freebsd

Marc Olzheim + 1 · Publicado 2005-04-05 · Atualizado 2017-10-12 · CVE-2005-0708

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.8 through 4.11 FreeBSD versions 5 through 5.4

Description The issue allows remote attackers to obtain sensitive information by transferring portions of kernel memory if a file is truncated while it is being sent using the sendfile system call.

Recommendations For FreeBSD versions 4.8 through 4.11, update to a version outside of this range to resolve the issue. For FreeBSD versions 5 through 5.4, update to a version outside of this range to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-0708

Produtos afetados

Freebsd

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-0708 · Nota de Segurança
• https://freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc · Aviso do Fabricante