OSVDB ID: 20730

Title: NetBSD procfs Negative uio_offset Unspecified Issue

Info

Disclosure
Oct 31, 2005

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 NetBSD contains a flaw related to the process file system (procfs) that may allow a malicious user to cause a negative uio_offset. No further details have been provided.

Classification

 Location: Local Access Required, Location Unknown
Attack Type: Denial of Service, Information Disclosure, Attack Type Unknown
Impact: Loss of Confidentiality, Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Upgrade to version 2.0.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

NetBSD Foundation, Inc.

NetBSD

 0.9
1.0
1.1
1.2
1.2.x
1.3
1.3.x
1.4
1.4.X
1.5
1.5.x
1.6
1.6.1
1.6.2
2.0
2.0.1
2.0.2

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/20730