PT-2005-5439 · Netbsd · Netbsd

Christer Oeberg · Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4776

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 20050913 in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 NetBSD version 1.6 before 20050914

Description The issue is related to an integer overflow in the FreeBSD compatibility code, which can cause a denial of service, resulting in heap corruption or system crash. It may also be possible for local users to gain root privileges.

Recommendations For NetBSD versions prior to 20050913 in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2, update to a version after 20050913. For NetBSD version 1.6 before 20050914, update to a version after 20050914.

Fix

Related Identifiers

CVE-2005-4776

Affected Products

Netbsd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4776 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2005-008.txt.asc · Vendor Advisory
• http://mail-index.netbsd.org/source-changes/2005/09/13/0024.html · Patch
• http://osvdb.org/20757 · Patch