PT-2006-6197 · Freebsd · Freebsd

Published 2006-10-24 · Updated 2008-09-05 · CVE-2006-5482

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD version 6.1

Description The issue allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK, or VDIR, which is not defined in POSIX.

Recommendations For FreeBSD version 6.1, consider restricting access to the ftruncate function to prevent unauthorized calls on unsupported file types until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-5482

Affected Products

Freebsd

References · 5

• 🔥 https://exploit-db.com/exploits/2541 · Exploit
• http://secunia.com/advisories/22413 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5482 · Security Note
• http://securityfocus.com/bid/20522 · Note
• http://lists.freebsd.org/pipermail/cvs-src/2006-May/064488.html · Note