CVE-2004-2338: High severity openbsd vulnerability
Published Dec 31, 2004
·Updated
OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions.
Affected Software
2 affected components
OpenBSD OpenBSD=3.3
OpenBSD OpenBSD=3.4
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 16, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2338?
CVE-2004-2338 has a moderate severity rating as it allows remote attackers to bypass access restrictions.
2
How do I fix CVE-2004-2338?
To fix CVE-2004-2338, upgrade to OpenBSD versions 3.5 or later where the parsing of Accept and Deny rules is properly handled.
3
Which OpenBSD versions are affected by CVE-2004-2338?
CVE-2004-2338 affects OpenBSD versions 3.3 and 3.4 on big-endian 64-bit platforms such as SPARC64.
4
What is the impact of CVE-2004-2338?
The impact of CVE-2004-2338 is that it may allow unauthorized remote access by bypassing the intended access restrictions.
5
Is CVE-2004-2338 specific to any hardware platform?
Yes, CVE-2004-2338 is specifically noted to affect big-endian 64-bit platforms, particularly SPARC64.