CVE-2004-0435: Low severity FreeBSD FreeBSD vulnerability
Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MSINVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0435?
CVE-2004-0435 has a moderate severity rating due to cache consistency issues that allow local users to prevent changes from being committed to disk.
How do I fix CVE-2004-0435?
To mitigate CVE-2004-0435, it is recommended to upgrade FreeBSD to a version later than 5.2.1 or 4.10.
Which versions of FreeBSD are affected by CVE-2004-0435?
CVE-2004-0435 affects FreeBSD versions 5.2.1 and earlier, and 4.10 and earlier.
Can a remote user exploit CVE-2004-0435?
No, CVE-2004-0435 can only be exploited by local users on the affected FreeBSD systems.
What are the potential impacts of CVE-2004-0435?
The potential impact of CVE-2004-0435 includes the inability to commit file changes to disk, leading to data loss and inconsistencies.