PT-2005-1682 · Openbsd · Openbsd

Published 2005-03-04 · Updated 2017-07-11 · CVE-2005-0637

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.5 through 3.6

Description The issue concerns the copy functions, such as copyout, in the locore.s file, which may allow attackers to exceed certain address boundaries and modify kernel memory. This could potentially be applicable to other BSD-based operating systems.

Recommendations For OpenBSD versions 3.5 and 3.6, consider applying a patch or fix to the copy functions in locore.s to prevent attackers from modifying kernel memory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0637

Affected Products

Openbsd

References · 7

• http://secunia.com/advisories/14432 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0637 · Security Note
• http://securityfocus.com/bid/12825 · Patch
• http://securitytracker.com/id?1013333 · Vendor Advisory
• http://openbsd.org/errata.html#copy · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19531 · Note
• http://openbsd.org/errata35.html#locore · Patch, Vendor Advisory