CVE

Id
21783  
CVE No.
CVE-2006-5679  
Status
Candidate  
Description
Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.  
Phase
Assigned (20061103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208707 21783 CVE-2006-5679 MLIST:[freebsd-security] 20070114 MOAB advisories  View
208708 21783 CVE-2006-5679 URL:http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html  View
208709 21783 CVE-2006-5679 MISC:http://projects.info-pull.com/mokb/MOKB-03-11-2006.html  View
208710 21783 CVE-2006-5679 CONFIRM:http://docs.info.apple.com/article.html?artnum=305214  View
208711 21783 CVE-2006-5679 APPLE:APPLE-SA-2007-03-13  View
208712 21783 CVE-2006-5679 URL:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html  View
208713 21783 CVE-2006-5679 CERT:TA07-072A  View
208714 21783 CVE-2006-5679 URL:http://www.us-cert.gov/cas/techalerts/TA07-072A.html  View
208715 21783 CVE-2006-5679 CERT-VN:VU#552136  View
208716 21783 CVE-2006-5679 URL:http://www.kb.cert.org/vuls/id/552136  View
208717 21783 CVE-2006-5679 BID:20918  View
208718 21783 CVE-2006-5679 URL:http://www.securityfocus.com/bid/20918  View
208719 21783 CVE-2006-5679 VUPEN:ADV-2007-0930  View
208720 21783 CVE-2006-5679 URL:http://www.vupen.com/english/advisories/2007/0930  View
208721 21783 CVE-2006-5679 SECTRACK:1017751  View
208722 21783 CVE-2006-5679 URL:http://www.securitytracker.com/id?1017751  View
208723 21783 CVE-2006-5679 SECUNIA:22736  View
208724 21783 CVE-2006-5679 URL:http://secunia.com/advisories/22736  View
208725 21783 CVE-2006-5679 SECUNIA:24479  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59213 JVNDB-2006-001479 Java 用 QuickTime における重要な情報を取得される脆弱性 Apple Mac OS X 上で稼働する Java 用 QuickTime には、Quartz Composer と共に使用されている際、重要な情報 (スクリーンイメージ) を取得される脆弱性が存在します。 CVE-2006-5681 21783 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001479.html  View