PT-2006-7258 · Netbsd Foundation · Netbsd

Published 2006-12-20 · Updated 2008-09-05 · CVE-2006-6656

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 20061027 NetBSD 2.x versions prior to 20061119 NetBSD 3.0 and 3.0.1 versions prior to 20061027

Description The issue allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PT LWPINFO request. This leads to a memory leak and information leak.

Recommendations For NetBSD versions prior to 20061027, update to a version after 20061027. For NetBSD 2.x versions prior to 20061119, update to a version after 20061119. For NetBSD 3.0 and 3.0.1 versions prior to 20061027, update to a version after 20061027.

Fix

Related Identifiers

CVE-2006-6656

Affected Products

Netbsd

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-6656 · Security Note
• http://securitytracker.com/id?1017292 · Vendor Advisory
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-025.txt.asc · Vendor Advisory