PT-2000-1397 · Netbsd Foundation · Netbsd

Published 2000-05-28 · Updated 2008-09-10 · CVE-2000-0456

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions 1.4.2 and earlier

Description The issue allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU.

Recommendations For NetBSD versions 1.4.2 and earlier, consider restricting access to system calls that do not yield the CPU to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0456

Affected Products

Netbsd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0456 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-005.txt.asc · Note
• http://osvdb.org/1365 · Note
• http://securityfocus.com/bid/1272 · Note