CVEvulnerability
CVE-2006-1588
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.
Affected configurations
• netbsd netbsd 1.6
• netbsd netbsd 1.6.1
• netbsd netbsd 1.6.2
• netbsd netbsd 2.0
• netbsd netbsd 2.0.1
• netbsd netbsd 2.0.2
• netbsd netbsd 2.0.3
• netbsd netbsd 2.1
• netbsd netbsd 3.0
References
- ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc Vendor Advisory
- http://secunia.com/advisories/19464 Vendor Advisory
- http://securitytracker.com/id?1015846 Patch
- http://www.osvdb.org/24262 www.osvdb.org
- http://www.securityfocus.com/bid/17312 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25582 exchange.xforce.ibmcloud.com
- ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc Vendor Advisory
- http://secunia.com/advisories/19464 Vendor Advisory
- http://securitytracker.com/id?1015846 Patch
- http://www.osvdb.org/24262 www.osvdb.org
- http://www.securityfocus.com/bid/17312 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25582 exchange.xforce.ibmcloud.com