CVEvulnerability

CVE-2005-1036

7.8 HIGH Published 2005-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-909

Description

FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.

Affected configurations

• freebsd freebsd (>= 5.0 <= 5.4)

Related

Weakness · CWE (1)

  • CWE-909 Missing Initialization of Resource weakness

Referenced by CWE · observed example (4)

  • CWE-665 Improper Initialization weakness
  • CWE-862 Missing Authorization weakness
  • CWE-908 Use of Uninitialized Resource weakness
  • CWE-909 Missing Initialization of Resource weakness

References