CVE-2005-1399

Published: May 6, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.

Affected (10)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.10
Freebsd Freebsd	Version 4.11
Freebsd Freebsd	Version 4.6
Freebsd Freebsd	Version 4.7
Freebsd Freebsd	Version 4.8
Freebsd Freebsd	Version 4.9
Freebsd Freebsd	Version 5.1
Freebsd Freebsd	Version 5.2
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.4

References (2)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.asc (unsafe URL)

Source: cve@mitre.org

PatchVendor Advisory

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.