PT-2007-2913 · Freebsd+2 · Freebsd+2

Publicado 2007-03-20 · Atualizado 2013-08-28 · CVE-2007-1523

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD version 3.0 FreeBSD versions (affected versions not specified) OpenBSD versions (affected versions not specified)

Description A heap-based buffer overflow issue exists in the kernel of certain BSD-derived operating systems, potentially allowing local users to have an unknown impact. The estimated number of potentially affected devices worldwide is not available.

Recommendations For NetBSD version 3.0, at the moment, there is no information about a newer version that contains a fix for this issue. For FreeBSD and OpenBSD, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2007-1523

Produtos afetados

Freebsd

Netbsd

Openbsd

Referências · 5

• http://osvdb.org/34593 · Nota
• http://kernelwars.blogspot.com/2007/01/alive.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1523 · Nota de Segurança
• http://blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson · Aviso do Fabricante
• http://securityfocus.com/bid/22945 · Nota