First published: Fri Dec 31 2004(Updated: )
The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
FreeBSD Kernel | =5.1-releng | |
FreeBSD Kernel | =5.1-release_p5 | |
FreeBSD Kernel | =5.2.1-releng | |
FreeBSD Kernel | =5.0-release_p14 | |
FreeBSD Kernel | =5.1-release | |
FreeBSD Kernel | =5.0-releng | |
FreeBSD Kernel | =5.1-alpha | |
FreeBSD Kernel | =5.1 | |
FreeBSD Kernel | =5.2 | |
FreeBSD Kernel | =5.0-alpha | |
FreeBSD Kernel | =5.2.1-release | |
FreeBSD Kernel | =5.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0919 has been classified as a medium severity vulnerability.
CVE-2004-0919 allows local users to read arbitrary kernel memory through manipulation of the syscons CONS_SCRSHOT ioctl.
To fix CVE-2004-0919, you should upgrade your FreeBSD systems to a patched version that resolves this vulnerability.
CVE-2004-0919 affects FreeBSD 5.0 to 5.2.1, including various specific alpha and release versions.
CVE-2004-0919 is a local vulnerability, meaning it can only be exploited by users with local access to the system.