NVD

Id
64574  
Name
CVE-2006-6013  
Description
Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c) in various BSD kernels, including DragonFlyBSD, FreeBSD 5.5, MidnightBSD 0.1-CURRENT before 20061115, NetBSD-current before 20061116, NetBSD-4 before 20061203, and TrustedBSD, allows local users to read arbitrary memory contents via certain negative values of crom_buf->len in an FW_GCROM command. NOTE: this issue has been labeled as an integer overflow, but it is more like an integer signedness error.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-11-21  
Modified Date
2008-09-05  
Seq
2006-6013  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337009 64574 CVE-2006-6013 20061115 NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure  View
337010 64574 CVE-2006-6013 http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/ieee1394/fwdev.c  View
337011 64574 CVE-2006-6013 [tech-security] 20061116 Re: [Full-disclosure] NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure  View
337012 64574 CVE-2006-6013 [tech-security] 20061214 NetBSD Security Note 20061214-1: Kernel memory leakage in firewire interface  View
337013 64574 CVE-2006-6013 FreeBSD-SA-06:25  View
337014 64574 CVE-2006-6013 1017344  View
337015 64574 CVE-2006-6013 http://www.dragonflybsd.org/cvsweb/src/sys/bus/firewire/fwdev.c  View
337016 64574 CVE-2006-6013 http://www.kernelhacking.com/bsdadv1.txt  View
337017 64574 CVE-2006-6013 20061115 FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure  View
337018 64574 CVE-2006-6013 20061115 NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure  View
337019 64574 CVE-2006-6013 20061115 DragonFlyBSD all versions FireWire IOCTL kernel integer overflow information disclousure  View
337020 64574 CVE-2006-6013 20061115 TrustedBSD* all versions FireWire IOCTL kernel integer overflow information disclousure  View
337021 64574 CVE-2006-6013 20061116 Re: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure  View
337022 64574 CVE-2006-6013 20061120 RE: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure  View
337023 64574 CVE-2006-6013 20061121 Clarifying integer overflows vs. signedness errors  View
337024 64574 CVE-2006-6013 20061122 Re: Clarifying integer overflows vs. signedness errors  View
337025 64574 CVE-2006-6013 21089  View
337026 64574 CVE-2006-6013 freebsd-fwdev-integer-overflow(30347)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59313 JVNDB-2006-001579 複数の BSD カーネル製品の IEEE-1394 ドライバ の FW_IOCTL 関数における整数符号化エラーの脆弱性 DragonFlyBSD、FreeBSD、MidnightBSD、NetBSD-current、NetBSD-4 および TrustedBSD を含むさまざまな BSD カーネルの FireWire (IEEE-1394) ドライバ (dev/firewire/fwdev.c) の fw_ioctl (FW_IOCTL) 関数には、整数符号化エラーの脆弱性が存在します。 CVE-2006-6013 22115 CVE-2006-6013 64574 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001579.html 2006-11-21 2012-06-26 View