CVE-2006-1588 - The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory

Back Back to CVE browser

LOW

The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory

Published Apr 3, 2006

2.1

LOW

CVSS 2.0

EPSS 0.34%

Description

The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc
vendor-advisoryx_refsource_NETBSDVendor Advisory
http://secunia.com/advisories/19464
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1015846
vdb-entryx_refsource_SECTRACKPatch
http://www.osvdb.org/24262
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17312
vdb-entryx_refsource_BIDPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1589
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25582
vdb-entryx_refsource_XF

Link	Providers	Tags
ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc		vendor-advisoryx_refsource_NETBSDVendor Advisory
http://secunia.com/advisories/19464		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1015846		vdb-entryx_refsource_SECTRACKPatch
http://www.osvdb.org/24262		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17312		vdb-entryx_refsource_BIDPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1589		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25582		vdb-entryx_refsource_XF