CVEvulnerability
CVE-2005-1399
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.
Affected configurations
• freebsd freebsd 4.6
• freebsd freebsd 4.7
• freebsd freebsd 4.8
• freebsd freebsd 4.9
• freebsd freebsd 4.10
• freebsd freebsd 4.11
• freebsd freebsd 5.1
• freebsd freebsd 5.2
• freebsd freebsd 5.3
• freebsd freebsd 5.4
References
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.asc Patch, Vendor Advisory
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.asc Patch, Vendor Advisory