CVE-2005-4733: Medium severity netbsd current vulnerability

Published Dec 31, 2005

Updated

NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the FCLOSEM fcntl with a parameter value of 0.

Affected Software

1 affected component

NetBSD NetBSD=2.0

Remediation

Patch Available

http://www.osvdb.org/20755

Event History

Dec 31, 2005

CVE Published

05:00 AM

Mar 19, 2006

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4733?

CVE-2005-4733 is classified as a denial of service vulnerability that can lead to system hangs.

How do I fix CVE-2005-4733?

To mitigate CVE-2005-4733, upgrade your NetBSD system to version 2.0 or later released after March 16, 2005.

Who is affected by CVE-2005-4733?

CVE-2005-4733 affects local users on systems running NetBSD 2.0 before March 16, 2005 and NetBSD-current prior to January 12, 2005.

What happens when CVE-2005-4733 is exploited?

Exploitation of CVE-2005-4733 can lead to an infinite loop and potential denial of service, causing the system to hang.

Is CVE-2005-4733 still relevant today?

While CVE-2005-4733 is an older vulnerability, it remains relevant for users of legacy systems still running affected versions of NetBSD.