CVE Vulnerabilities

CVE-2004-1066

Published: Jan 10, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.6 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 4.0 4.0
Freebsd Freebsd 4.1 4.1
Freebsd Freebsd 4.1.1 4.1.1
Freebsd Freebsd 4.2 4.2
Freebsd Freebsd 4.3 4.3
Freebsd Freebsd 4.4 4.4
Freebsd Freebsd 4.5 4.5
Freebsd Freebsd 4.6 4.6
Freebsd Freebsd 4.7 4.7
Freebsd Freebsd 4.8 4.8
Freebsd Freebsd 4.8 4.8
Freebsd Freebsd 4.9 4.9
Freebsd Freebsd 4.10 4.10
Freebsd Freebsd 4.10 4.10
Freebsd Freebsd 4.10 4.10
Freebsd Freebsd 5.0 5.0
Freebsd Freebsd 5.1 5.1
Freebsd Freebsd 5.2 5.2
Freebsd Freebsd 5.2.1 5.2.1
Freebsd Freebsd 5.2.1 5.2.1
Freebsd Freebsd 5.3 5.3
Freebsd Freebsd 5.3 5.3
Freebsd Freebsd 5.3 5.3
Kfreebsd-5 Ubuntu dapper *
Kfreebsd-5 Ubuntu devel *
Kfreebsd-5 Ubuntu edgy *
Kfreebsd-5 Ubuntu feisty *

References