PT-2006-6197 · Freebsd · Freebsd

Publicado 2006-10-24 · Atualizado 2008-09-05 · CVE-2006-5482

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD version 6.1

Description The issue allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK, or VDIR, which is not defined in POSIX.

Recommendations For FreeBSD version 6.1, consider restricting access to the ftruncate function to prevent unauthorized calls on unsupported file types until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-5482

Produtos afetados

Freebsd

Referências · 5

• 🔥 https://exploit-db.com/exploits/2541 · Exploit
• http://securityfocus.com/bid/20522 · Nota
• http://secunia.com/advisories/22413 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-5482 · Nota de Segurança
• http://lists.freebsd.org/pipermail/cvs-src/2006-May/064488.html · Nota