PT-2006-7008 · Netbsd+2 · Netbsd+2

CVE-2006-6397

·

Publicado

2006-12-08

·

Atualizado

2024-08-07

CVSS v2.0

4.4

Média

VetorAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions No vulnerable software versions are specified, as the issue is disputed and not considered a vulnerability.
Description The issue in question pertains to an alleged integer overflow in the banner/banner.c file within FreeBSD, NetBSD, and OpenBSD. It was suggested that this could potentially allow local users to modify memory by utilizing a long banner. However, it's crucial to note that this issue is disputed by multiple third parties, including CVE, and is not regarded as a vulnerability. The reason provided is that the banner is not setuid, meaning an exploit would not cross privilege boundaries during normal operations.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2006-6397

Produtos afetados

Freebsd
Netbsd
Openbsd