PT-2005-5398 · Netbsd · Netbsd

Brian Marcotte · Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4733

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions NetBSD versions 2.0 before 20050316 NetBSD-current versions before 20050112

Description The issue allows local users to cause a denial of service, resulting in an infinite loop and system hang. This is achieved by calling the F CLOSEM fcntl with a parameter value of 0.

Recommendations For NetBSD versions 2.0 before 20050316, update to a version after 20050316 to resolve the issue. For NetBSD-current versions before 20050112, update to a version after 20050112 to resolve the issue.

Fix

Related Identifiers

CVE-2005-4733

Affected Products

Netbsd

References · 4

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-003.txt.asc · Vendor Advisory
• http://osvdb.org/20755 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4733 · Security Note
• http://mail-index.netbsd.org/source-changes/2005/01/12/0059.html · Note