CVE-2006-6397: Integer Overflow

Published Dec 8, 2006

Updated

DISPUTED Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner is not setuid, an exploit would not cross privilege boundaries in normal operations. This issue is not a vulnerability.

Affected Software

3 affected components

NetBSD NetBSD=2.0.4

FreeBSD FreeBSD=6.2-stable

OpenBSD OpenBSD

Event History

Dec 8, 2006

CVE Published

01:28 AM

Disputed

01:28 AM

Data Sourced

via NVD·01:28 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-6397?

CVE-2006-6397 is disputed regarding its severity, but it primarily affects local user memory modification.

How do I fix CVE-2006-6397?

The best mitigation for CVE-2006-6397 is to apply the latest patches for FreeBSD, NetBSD, and OpenBSD.

Which systems are affected by CVE-2006-6397?

CVE-2006-6397 affects FreeBSD, NetBSD, and OpenBSD, particularly specific versions of these systems.

Can CVE-2006-6397 be exploited remotely?

CVE-2006-6397 is not considered exploitable remotely as the banner utility is not setuid.

What type of vulnerability is CVE-2006-6397?

CVE-2006-6397 is an integer overflow vulnerability that may allow local users to alter memory.