← Back

CVE-2005-1036

nvd nist
Published: May 2, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.

Affected (1)

Products: Freebsd: Freebsd
Freebsd
1 product
Freebsd
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Freebsd
From 5.0 to 5.4
Running on/withPlatform Versions
Amd
Amd64
All versions

Related CWEs

CWE-909
Missing Initialization of Resource
The product does not initialize a critical resource.

References (2)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc (unsafe URL)
Source: cve@mitre.org
Broken Link
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.