PT-2006-7258 · Netbsd Foundation · Netbsd

Publicado 2006-12-20 · Atualizado 2008-09-05 · CVE-2006-6656

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 20061027 NetBSD 2.x versions prior to 20061119 NetBSD 3.0 and 3.0.1 versions prior to 20061027

Description The issue allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PT LWPINFO request. This leads to a memory leak and information leak.

Recommendations For NetBSD versions prior to 20061027, update to a version after 20061027. For NetBSD 2.x versions prior to 20061119, update to a version after 20061119. For NetBSD 3.0 and 3.0.1 versions prior to 20061027, update to a version after 20061027.

Correção

Identificadores relacionados

CVE-2006-6656

Produtos afetados

Netbsd

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-6656 · Nota de Segurança
• http://securitytracker.com/id?1017292 · Aviso do Fabricante
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-025.txt.asc · Aviso do Fabricante