FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-0379

This CVE name corresponds to:

Entered Topic
2006-02-14 FreeBSD -- Local kernel memory disclosure

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2006-0379
Phase Assigned(20060124)

Description

FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory.

References

Source Reference
FREEBSD FreeBSD-SA-06:06
BID 16373
OSVDB 22730
SECTRACK 1015541
SECUNIA 18599
XF bsd-buffer-initialization-disclosure(24338)