CVE-2006-6656: Low severity NetBSD NetBSD vulnerability

Published Dec 20, 2006

Updated

Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PTLWPINFO request, which leads to a memory leak and information leak.

Affected Software

4 affected components

NetBSD NetBSD=2.1

NetBSD NetBSD=3.0.1

NetBSD NetBSD=3.0

NetBSD NetBSD=2.0

Remediation

Patch Available

http://securitytracker.com/id?1017292

Event History

Dec 20, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Data Sourced

via NVD·02:28 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-6656?

CVE-2006-6656 is considered a high severity vulnerability due to its potential for local users to read sensitive kernel memory.

How does CVE-2006-6656 affect NetBSD systems?

CVE-2006-6656 allows local users on affected NetBSD versions to manipulate a PT_LWPINFO request, leading to sensitive information leaks.

What versions of NetBSD are impacted by CVE-2006-6656?

CVE-2006-6656 affects NetBSD versions 2.0, 2.1, 3.0, and 3.0.1 prior to specified updates in 2006.

How do I fix CVE-2006-6656?

To address CVE-2006-6656, update your NetBSD system to the latest patched version.

What type of users can exploit CVE-2006-6656?

CVE-2006-6656 can be exploited by local users who have access to the affected NetBSD systems.