CVE

Id
75777  
CVE No.
CVE-2014-8476  
Status
Candidate  
Description
The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from kernel memory via a call to getlogin, which returns the entire buffer.  
Phase
Assigned (20141024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
700710 75777 CVE-2014-8476 DEBIAN:DSA-3070  View
700711 75777 CVE-2014-8476 URL:http://www.debian.org/security/2014/dsa-3070  View
700712 75777 CVE-2014-8476 FREEBSD:FreeBSD-SA-14:25  View
700713 75777 CVE-2014-8476 URL:https://www.freebsd.org/security/advisories/FreeBSD-SA-14%3A25.setlogin.asc  View
700714 75777 CVE-2014-8476 SECUNIA:61118  View
700715 75777 CVE-2014-8476 URL:http://secunia.com/advisories/61118  View
700716 75777 CVE-2014-8476 SECUNIA:62218  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16970 JVNDB-2014-005845 GNU Binutils の libdbfd の bfd/srec.c 内の srec_scan 関数におけるサービス運用妨害 (DoS) の脆弱性 GNU Binutils の libdbfd の bfd/srec.c 内の srec_scan 関数には、サービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2014-8484 75777 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005845.html  View