CVE-2002-0973

Published: Sep 24, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpeername system calls, and the (4) vesa FBIO_GETPALETTE ioctl.

Affected (18)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.0
Freebsd Freebsd	Version 4.1.1
Freebsd Freebsd	Version 4.1.1 release
Freebsd Freebsd	Version 4.1.1 stable
Freebsd Freebsd	Version 4.1
Freebsd Freebsd	Version 4.2
Freebsd Freebsd	Version 4.2 stable
Freebsd Freebsd	Version 4.3
Freebsd Freebsd	Version 4.3 release
Freebsd Freebsd	Version 4.3 stable
Freebsd Freebsd	Version 4.4
Freebsd Freebsd	Version 4.4 stable
Freebsd Freebsd	Version 4.5
Freebsd Freebsd	Version 4.5 release
Freebsd Freebsd	Version 4.5 stable
Freebsd Freebsd	Version 4.6.1 release_p10
Freebsd Freebsd	Version 4.6
Freebsd Freebsd	Version 4.6 release

References (6)

http://marc.info/?l=bugtraq&m=102976839728706&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/9903.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/5493

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=102976839728706&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/9903.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5493

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.