← Back

CVE-2005-1126

nvd nist
Published: Apr 15, 2005Modified: Apr 16, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.

Affected (61)

Products: Freebsd: Freebsd
1 product
Freebsd
Configuration A
61 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Version 4.0
Version 4.0 alpha
Version 4.0 releng
Version 4.1.1
Version 4.1.1 release
Version 4.1.1 stable
Version 4.10
Version 4.10 release
Version 4.10 releng
Version 4.11 stable
Version 4.1
Version 4.2
Version 4.2 stable
Version 4.3
Version 4.3 release
Version 4.3 release_p38
Version 4.3 releng
Version 4.3 stable
Version 4.4
Version 4.4 release_p42
Version 4.4 releng
Version 4.4 stable
Version 4.5
Version 4.5 release
Version 4.5 release_p32
Version 4.5 releng
Version 4.5 stable
Version 4.6.2
Version 4.6
Version 4.6 release
Version 4.6 release_p20
Version 4.6 releng
Version 4.6 stable
Version 4.7
Version 4.7 release
Version 4.7 release_p17
Version 4.7 releng
Version 4.7 stable
Version 4.8
Version 4.8 pre-release
Version 4.8 release_p6
Version 4.8 releng
Version 4.9
Version 4.9 pre-release
Version 4.9 releng
Version 5.0
Version 5.0 alpha
Version 5.0 release_p14
Version 5.0 releng
Version 5.1
Version 5.1 alpha
Version 5.1 release
Version 5.1 release_p5
Version 5.1 releng
Version 5.2.1 release
Version 5.2.1 releng
Version 5.2
Version 5.3
Version 5.3 release
Version 5.3 releng
Version 5.3 stable

Related CWEs

References (16)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:04.ifconf.asc (unsafe URL)
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:04.ifconf.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.