PT-2006-7008 · Netbsd+2 · Netbsd+2

Published 2006-12-08 · Updated 2024-08-07 · CVE-2006-6397

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions No vulnerable software versions are specified, as the issue is disputed and not considered a vulnerability.

Description The issue in question pertains to an alleged integer overflow in the banner/banner.c file within FreeBSD, NetBSD, and OpenBSD. It was suggested that this could potentially allow local users to modify memory by utilizing a long banner. However, it's crucial to note that this issue is disputed by multiple third parties, including CVE, and is not regarded as a vulnerability. The reason provided is that the banner is not setuid, meaning an exploit would not cross privilege boundaries during normal operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-6397

Affected Products

Freebsd

Netbsd

Openbsd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-6397 · Security Note
• http://securityfocus.com/archive/1/452470/100/200/threaded · Note
• http://securityfocus.com/archive/1/452330/100/200/threaded · Note
• http://securityfocus.com/archive/1/452322/100/200/threaded · Note
• http://securityfocus.com/archive/1/452374/100/200/threaded · Note