First published: Sat Dec 31 2005(Updated: )
Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service (heap corruption or system crash) and possibly gain root privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
NetBSD NetBSD | =1.6 | |
NetBSD NetBSD | =1.6-beta | |
NetBSD NetBSD | =1.6.1 | |
NetBSD NetBSD | =1.6.2 | |
NetBSD NetBSD | =2.0 | |
NetBSD NetBSD | =2.0.1 | |
NetBSD NetBSD | =2.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-4776 has a severity that allows local users to cause denial of service, including potential system crashes and heap corruption.
To fix CVE-2005-4776, upgrade to a patched version of NetBSD released after September 13, 2005.
CVE-2005-4776 affects NetBSD versions 1.6, 2.0, as well as their beta and minor releases prior to specified patch dates.
Yes, CVE-2005-4776 may potentially allow local users to gain root privileges under certain conditions.
CVE-2005-4776 is classified as an integer overflow vulnerability within the FreeBSD compatibility code.