PT-2005-1747 · Freebsd · Freebsd

Marc Olzheim + 1 · Published 2005-04-05 · Updated 2017-10-12 · CVE-2005-0708

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.8 through 4.11 FreeBSD versions 5 through 5.4

Description The issue allows remote attackers to obtain sensitive information by transferring portions of kernel memory if a file is truncated while it is being sent using the sendfile system call.

Recommendations For FreeBSD versions 4.8 through 4.11, update to a version outside of this range to resolve the issue. For FreeBSD versions 5 through 5.4, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2005-0708

Affected Products

Freebsd

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-0708 · Security Note
• https://freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc · Vendor Advisory