PT-2006-7259 · Netbsd Foundation · Netbsd

Published 2006-12-20 · Updated 2008-09-05 · CVE-2006-6657

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 20061027 NetBSD 2.x versions prior to 20061119 NetBSD 3.0 and 3.0.1 versions prior to 20061027

Description The issue allows local users to read potentially sensitive, uninitialized stack memory. This is due to a problem in the if clone list function.

Recommendations For NetBSD versions prior to 20061027, update to a version after 20061027. For NetBSD 2.x versions prior to 20061119, update to a version after 20061119. For NetBSD 3.0 and 3.0.1 versions prior to 20061027, update to a version after 20061027.

Fix

Related Identifiers

CVE-2006-6657

Affected Products

Netbsd

References · 3

• http://securitytracker.com/id?1017292 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6657 · Security Note
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-025.txt.asc · Vendor Advisory