CVE-2005-4352: Low severity Linux Linux kernel vulnerability
The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4352?
CVE-2005-4352 is considered a high severity vulnerability due to its potential to allow local users to bypass time-setting restrictions.
How do I fix CVE-2005-4352?
To fix CVE-2005-4352, upgrade to a version of the Linux kernel or NetBSD that is later than the affected versions specified in the vulnerability description.
Who is affected by CVE-2005-4352?
CVE-2005-4352 affects users of Linux kernel versions 2.6.15 and earlier, as well as NetBSD 2.1 and earlier.
What types of systems are vulnerable to CVE-2005-4352?
Systems running vulnerable versions of the Linux kernel and NetBSD are susceptible to CVE-2005-4352.
What are the implications of CVE-2005-4352?
The implications of CVE-2005-4352 include unauthorized changes to system time, which can disrupt time-sensitive applications and security protocols.