CVE-2005-1400

Published: May 6, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values.

Affected (9)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.10
Freebsd Freebsd	Version 4.11
Freebsd Freebsd	Version 4.7
Freebsd Freebsd	Version 4.8
Freebsd Freebsd	Version 4.9
Freebsd Freebsd	Version 5.1
Freebsd Freebsd	Version 5.2
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.4

References (2)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:07.ldt.asc (unsafe URL)

Source: cve@mitre.org

PatchVendor Advisory

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:07.ldt.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.