PT-2006-1225 · Netbsd+1 · Netbsd+1

Published 2006-01-09 · Updated 2018-10-19 · CVE-2006-0145

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD versions 1.6 through 2.1 OpenBSD version 3.8

Description The issue arises from the kernfs xread function in kernfs, which fails to properly validate file offsets against negative 32-bit values resulting from truncation. This allows local users to read arbitrary kernel memory and potentially gain privileges through the lseek system call.

Recommendations For NetBSD versions 1.6 through 2.1, update to a version that includes a fix for the kernfs xread function issue. For OpenBSD version 3.8, update to a version that includes a fix for the kernfs xread function issue.

Fix

Related Identifiers

CVE-2006-0145

Affected Products

Netbsd

Openbsd

References · 10

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc · Vendor Advisory
• http://secunia.com/advisories/18388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0145 · Security Note
• http://securitylab.net/research/2006/02/advisory_netbsd_openbsd_kernfs.html · Vendor Advisory
• http://securityfocus.com/bid/16173 · Patch
• http://secunia.com/advisories/18712 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24035 · Note
• http://securityreason.com/securityalert/405 · Note
• http://securityfocus.com/archive/1/423827/100/0/threaded · Note
• http://osvdb.org/22293 · Note