PT-2006-1225 · Netbsd+1 · Netbsd+1

Publicado 2006-01-09 · Atualizado 2018-10-19 · CVE-2006-0145

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions 1.6 through 2.1 OpenBSD version 3.8

Description The issue arises from the kernfs xread function in kernfs, which fails to properly validate file offsets against negative 32-bit values resulting from truncation. This allows local users to read arbitrary kernel memory and potentially gain privileges through the lseek system call.

Recommendations For NetBSD versions 1.6 through 2.1, update to a version that includes a fix for the kernfs xread function issue. For OpenBSD version 3.8, update to a version that includes a fix for the kernfs xread function issue.

Correção

Identificadores relacionados

CVE-2006-0145

Produtos afetados

Netbsd

Openbsd

Referências · 10

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24035 · Nota
• http://secunia.com/advisories/18388 · Aviso do Fabricante
• http://securityreason.com/securityalert/405 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0145 · Nota de Segurança
• http://securitylab.net/research/2006/02/advisory_netbsd_openbsd_kernfs.html · Aviso do Fabricante
• http://securityfocus.com/bid/16173 · Correção
• http://secunia.com/advisories/18712 · Aviso do Fabricante
• http://securityfocus.com/archive/1/423827/100/0/threaded · Nota
• http://osvdb.org/22293 · Nota