CVEvulnerability

CVE-2004-2338

7.5 HIGH Published 2004-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions.

Affected configurations

• openbsd openbsd 3.3 • openbsd openbsd 3.4

References

http://www.openbsd.org/errata33.html Patch
http://www.openbsd.org/errata34.html Patch
http://www.securityfocus.com/bid/9867 Patch
http://www.openbsd.org/errata33.html Patch
http://www.openbsd.org/errata34.html Patch
http://www.securityfocus.com/bid/9867 Patch