Integer Signedness Error in FireWire Drivers Affects Multiple BSD Vendors
CVE-2006-6013

Currently unrated

Key Information:

Vendor: Midnightbsd
Status: Midnightbsd; Netbsd; FreeBSD; Dragonflybsd
Vendor: CVE Published:; 21 November 2006

🔔 Create Midnightbsd Vulnerability Alert

What is CVE-2006-6013?

This vulnerability is due to an integer signedness error within the fw_ioctl function in FireWire drivers for various BSD operating systems. Local users can exploit this error by passing negative values to the crom_buf->len parameter in an FW_GCROM command, potentially allowing them to read arbitrary memory contents from the kernel's memory space. This poses a significant security risk as it can lead to unauthorized access to sensitive information.

References

http://www.securityfocus.com/archive/1/451861/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://securitytracker.com/id?1017344

vdb-entryx_refsource_SECTRACK

http://archives.neohapsis.com/archives/fulldisclosure/200...

mailing-listx_refsource_FULLDISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 21, 2006
Vulnerability Reserved
Nov 21, 2006

CVE-2006-6013 Data

JSON