Vulnerability Name:

CVE-2005-4733 (CCN-25355)

Assigned:2005-10-31
Published:2005-10-31
Updated:2008-09-05
Summary:NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0.
CVSS v3 Severity:6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: NETBSD
Type: Vendor Advisory
NetBSD-SA2005-003

Source: CCN
Type: NetBSD Security Advisory 2005-003
F_CLOSEM local denial of service

Source: MITRE
Type: CNA
CVE-2005-4733

Source: CONFIRM
Type: UNKNOWN
http://mail-index.netbsd.org/source-changes/2005/01/12/0059.html

Source: CCN
Type: The NetBSD Project Web site
The NetBSD Project

Source: OSVDB
Type: Patch
20755

Source: CCN
Type: OSVDB ID: 20755
NetBSD F_CLOSEM fnctl() Local DoS

Source: XF
Type: UNKNOWN
bsd-fclosem-dos(25355)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:netbsd:netbsd:2.0:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/o:netbsd:netbsd:current:*:*:*:*:*:*:*
  • OR cpe:/o:netbsd:netbsd:2.0:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    netbsd netbsd 2.0
    netbsd netbsd current
    netbsd netbsd 2.0