PT-2004-1524 · Freebsd+1 · Freebsd+1

Published 2004-04-06 · Updated 2017-07-11 · CVE-2004-0370

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD version 5.2

Description The issue is related to the setsockopt call in the KAME Project IPv6 implementation. It does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.

Recommendations For FreeBSD version 5.2, update to a version that includes a fix for the setsockopt call issue in the KAME Project IPv6 implementation.

Fix

Related Identifiers

CVE-2004-0370

Affected Products

Freebsd

Kame Project Ipv6

References · 5

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0370 · Security Note
• http://secunia.com/advisories/11233 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15662 · Note
• http://securityfocus.com/bid/9992 · Note