CVEvulnerability

CVE-2005-1406

4.6 MEDIUM Published 2005-05-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.

Affected configurations

• freebsd freebsd 4.1 • freebsd freebsd 4.2 • freebsd freebsd 4.3 • freebsd freebsd 4.4 • freebsd freebsd 4.5 • freebsd freebsd 4.6 • freebsd freebsd 4.7 • freebsd freebsd 4.8 • freebsd freebsd 4.9 • freebsd freebsd 4.10 • freebsd freebsd 4.11 • freebsd freebsd 5.1 • freebsd freebsd 5.2 • freebsd freebsd 5.3 • freebsd freebsd 5.4

Related

Referenced by CWE · observed example (1)

  • CWE-226 Sensitive Information in Resource Not Removed Before Reuse weakness

References