CVE-2006-6653: Input Validation
The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka "a dangling socket").
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6653?
CVE-2006-6653 has a severity rating that indicates it may lead to denial of service by socket consumption.
How do I fix CVE-2006-6653?
To fix CVE-2006-6653, update to a patched version of NetBSD that addresses the vulnerability.
Who is affected by CVE-2006-6653?
CVE-2006-6653 affects local users of NetBSD versions before certain patch dates, which include NetBSD-current before 20061023, 3.0 and 3.0.1 before 20061024, and 2.x before 20061029.
What type of attack does CVE-2006-6653 facilitate?
CVE-2006-6653 facilitates a denial of service attack due to improper handling of socket parameters.
Is CVE-2006-6653 a remote or local vulnerability?
CVE-2006-6653 is a local vulnerability, meaning it can only be exploited by users with local access.