PT-2005-5439 · Netbsd · Netbsd

Christer Oeberg · Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4776

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 20050913 in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 NetBSD version 1.6 before 20050914

Description The issue is related to an integer overflow in the FreeBSD compatibility code, which can cause a denial of service, resulting in heap corruption or system crash. It may also be possible for local users to gain root privileges.

Recommendations For NetBSD versions prior to 20050913 in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2, update to a version after 20050913. For NetBSD version 1.6 before 20050914, update to a version after 20050914.

Correção

Identificadores relacionados

CVE-2005-4776

Produtos afetados

Netbsd

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4776 · Nota de Segurança
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-008.txt.asc · Aviso do Fabricante
• http://mail-index.netbsd.org/source-changes/2005/09/13/0024.html · Correção
• http://osvdb.org/20757 · Correção