PT-2004-1600 · Openbsd · Openbsd

Christer Oberg + 1 · Published 2004-05-20 · Updated 2024-02-14 · CVE-2004-0482

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.5 and earlier

Description The issue is related to multiple integer overflows in several procfs files for OpenBSD, including procfs cmdline.c, procfs fpregs.c, procfs linux.c, procfs regs.c, procfs status.c, and procfs subr.c. This allows local users to read sensitive kernel memory and possibly perform other unauthorized activities.

Recommendations For OpenBSD versions 3.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0482

Affected Products

Openbsd

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2004-0482 · Security Note
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch · Patch
• http://openbsd.org/errata35.html · Vendor Advisory
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch · Patch
• http://openbsd.org/errata34.html · Vendor Advisory
• http://marc.info/?l=full-disclosure&m=108481812926420&w=2 · Note
• http://marc.info/?l=openbsd-security-announce&m=108445767103004&w=2 · Note
• http://secunia.com/advisories/11605 · Note
• http://osvdb.org/6114 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16226 · Note
• http://deprotect.com/advisories/DEPROTECT-20041305.txt · Note