CVE-2005-0708 The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtai...
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| DragonFlyBSD | = 1.0 | No fix listed |
| DragonFlyBSD | = 1.1 | No fix listed |
| freebsd | = 4.0 | No fix listed |
| freebsd | = 4.0-alpha | No fix listed |
| freebsd | = 4.0-releng | No fix listed |
| freebsd | = 4.1 | No fix listed |
| freebsd | = 4.1.1 | No fix listed |
| freebsd | = 4.1.1-release | No fix listed |
| freebsd | = 4.1.1-stable | No fix listed |
| freebsd | = 4.2 | No fix listed |
| freebsd | = 4.2-stable | No fix listed |
| freebsd | = 4.3 | No fix listed |
| freebsd | = 4.3-release | No fix listed |
| freebsd | = 4.3-release_p38 | No fix listed |
| freebsd | = 4.3-releng | No fix listed |
| freebsd | = 4.3-stable | No fix listed |
| freebsd | = 4.4 | No fix listed |
| freebsd | = 4.4-release_p42 | No fix listed |
| freebsd | = 4.4-releng | No fix listed |
| freebsd | = 4.4-stable | No fix listed |
| freebsd | = 4.5 | No fix listed |
| freebsd | = 4.5-release | No fix listed |
| freebsd | = 4.5-release_p32 | No fix listed |
| freebsd | = 4.5-releng | No fix listed |
| freebsd | = 4.5-stable | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | = 4.6 | No fix listed |
| freebsd | = 4.6-release | No fix listed |
| freebsd | = 4.6-release_p20 | No fix listed |
| freebsd | = 4.6-releng | No fix listed |
| freebsd | = 4.6-stable | No fix listed |
| freebsd | = 4.6.2 | No fix listed |
| freebsd | = 4.7 | No fix listed |
| freebsd | = 4.7-release | No fix listed |
| freebsd | = 4.7-release_p17 | No fix listed |
| freebsd | = 4.7-releng | No fix listed |
| freebsd | = 4.7-stable | No fix listed |
| freebsd | = 4.8 | No fix listed |
| freebsd | = 4.8-pre-release | No fix listed |
| freebsd | = 4.8-release_p6 | No fix listed |
| freebsd | = 4.8-releng | No fix listed |
| freebsd | = 4.9 | No fix listed |
| freebsd | = 4.9-pre-release | No fix listed |
| freebsd | = 4.9-releng | No fix listed |
| freebsd | = 4.10 | No fix listed |
| freebsd | = 4.10-release | No fix listed |
| freebsd | = 4.10-releng | No fix listed |
| freebsd | = 4.11-stable | No fix listed |
| freebsd | = 5.0 | No fix listed |
| freebsd | = 5.0-alpha | No fix listed |
| freebsd | = 5.0-release_p14 | No fix listed |
| freebsd | = 5.0-releng | No fix listed |
| freebsd | = 5.1 | No fix listed |
| freebsd | = 5.1-alpha | No fix listed |
| freebsd | = 5.1-release | No fix listed |
| freebsd | = 5.1-release_p5 | No fix listed |
| freebsd | = 5.1-releng | No fix listed |
| freebsd | = 5.2 | No fix listed |
| freebsd | = 5.2.1-release | No fix listed |
| freebsd | = 5.2.1-releng | No fix listed |
| freebsd | = 5.3 | No fix listed |
| freebsd | = 5.3-release | No fix listed |
| freebsd | = 5.3-stable | No fix listed |
| freebsd | = 5.4-pre-release | No fix listed |
References
- FreeBSD-SA-05:02 vendor-advisory