CVE-2009-1436

Опубликовано: 27 апр. 2009

Источник: nvd

CVSS2: 4.9

EPSS Низкий

Описание

The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.

Ссылки

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756
http://osvdb.org/53918
http://secunia.com/advisories/34810
Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc
Vendor Advisory
http://www.securityfocus.com/bid/34666
Exploit
Patch
http://www.securitytracker.com/id?1022113
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10756
http://osvdb.org/53918
http://secunia.com/advisories/34810
Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc
Vendor Advisory
http://www.securityfocus.com/bid/34666
Exploit
Patch
http://www.securitytracker.com/id?1022113

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.0:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.0:release-p12:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00276

Низкий

4.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2009-1436

debian

почти 17 лет назад

The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PREREL ...

GHSA-2wg6-6w9v-622w

github

почти 4 года назад