CVEvulnerability

CVE-2006-6730

6.6 MEDIUM Published 2006-12-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-12-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.6 MEDIUM — AV:L/AC:M/Au:S/C:C/I:C/A:C

Description

OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by replacing the System Management Mode (SMM) handler via a write to an SMRAM address within /dev/xf86 (aka the video card memory-mapped I/O range), and then launching the new handler via a System Management Interrupt (SMI), as demonstrated by a write to Programmed I/O port 0xB2.

Affected configurations

• netbsd netbsd 2.0.4 • openbsd openbsd

References