PT-2007-2913 · Freebsd+2 · Freebsd+2

Published 2007-03-20 · Updated 2013-08-28 · CVE-2007-1523

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetBSD version 3.0 FreeBSD versions (affected versions not specified) OpenBSD versions (affected versions not specified)

Description A heap-based buffer overflow issue exists in the kernel of certain BSD-derived operating systems, potentially allowing local users to have an unknown impact. The estimated number of potentially affected devices worldwide is not available.

Recommendations For NetBSD version 3.0, at the moment, there is no information about a newer version that contains a fix for this issue. For FreeBSD and OpenBSD, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-1523

Affected Products

Freebsd

Netbsd

Openbsd

References · 5

• http://kernelwars.blogspot.com/2007/01/alive.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1523 · Security Note
• http://blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson · Vendor Advisory
• http://osvdb.org/34593 · Note
• http://securityfocus.com/bid/22945 · Note