PT-2007-2692 · Netbsd · Netbsd

Publicado 2007-03-10 · Atualizado 2009-10-14 · CVE-2007-1273

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 20061022 NetBSD 3 and 3-0 versions prior to 20061024 NetBSD 2 versions prior to 20070209

Description The issue is related to an integer overflow in the ktruser function. This occurs when the kernel is built with the COMPAT FREEBSD or COMPAT DARWIN option, allowing local users to cause a denial of service and possibly gain privileges.

Recommendations For NetBSD versions prior to 20061022, update to a version after 20061022. For NetBSD 3 and 3-0 versions prior to 20061024, update to a version after 20061024. For NetBSD 2 versions prior to 20070209, update to a version after 20070209.

Correção

Identificadores relacionados

CVE-2007-1273

Produtos afetados

Netbsd

Referências · 4

• http://osvdb.org/35453 · Nota
• http://securityfocus.com/bid/22878 · Nota
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-001.txt.asc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1273 · Nota de Segurança