PT-2005-2058 · Freebsd · Freebsd

Published 2005-04-10 · Updated 2024-02-09 · CVE-2005-1036

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 5.x through 5.4 on AMD64

Description The issue allows local users to bypass intended access restrictions, potentially causing a denial of service, obtaining sensitive information, and possibly gaining privileges due to the improper initialization of the IO permission bitmap. This bitmap is used to control user access to certain hardware.

Recommendations For FreeBSD versions 5.x through 5.4 on AMD64, consider restricting access to sensitive hardware components until a proper fix is applied to ensure the IO permission bitmap is correctly initialized. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-909

Related Identifiers

CVE-2005-1036

Affected Products

Freebsd

References · 3

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1036 · Security Note
• https://t.me/cvenotify/70688 · Telegram Post