CVE-2004-1066: Low severity FreeBSD FreeBSD vulnerability
The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1066?
CVE-2004-1066 is considered a denial of service vulnerability that can also expose kernel memory.
How do I fix CVE-2004-1066?
To mitigate CVE-2004-1066, it is recommended to upgrade to a patched version of FreeBSD that addresses this vulnerability.
Which versions of FreeBSD are affected by CVE-2004-1066?
CVE-2004-1066 affects FreeBSD versions 4.0 to 5.3, including specific releases like 4.1.1, 4.10, and 5.3-release.
Can CVE-2004-1066 be exploited remotely?
CVE-2004-1066 is a local vulnerability, meaning it requires local user access to exploit.
What are the potential impacts of CVE-2004-1066?
The potential impacts of CVE-2004-1066 include denial of service, system crashes, and unauthorized access to sensitive kernel memory.