2.1
CVSSv2

CVE-2003-1289

Published: 31/12/2003 Updated: 20/07/2017
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The iBCS2 system call translator for statfs in NetBSD 1.5 up to and including 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to read portions of kernel memory (memory disclosure) via a large length parameter, which copies additional kernel memory into userland memory.

Vulnerable Product Search on Vulmon Subscribe to Product