PT-2005-2397 · Freebsd · Freebsd

Publicado 2005-05-06 · Atualizado 2008-09-05 · CVE-2005-1400

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 4.7 through 4.11 FreeBSD versions 5.x through 5.4

Description: The issue allows local users to access sensitive kernel memory. This is achieved by utilizing the i386 get ldt system call with arguments that have negative or very large values.

Recommendations: For FreeBSD versions 4.7 through 4.11, update to a version outside of this range to resolve the issue. For FreeBSD versions 5.x through 5.4, update to a version outside of this range to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-1400

Produtos afetados

Freebsd

Referências · 2

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:07.ldt.asc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1400 · Nota de Segurança