Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-1399
freebsd
cve-2005-1399
insecure permissions
/dev/iir
ioctl calls
iir driver
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.
Affected configurations
Node
freebsdfreebsdMatch4.6
ORfreebsdfreebsdMatch4.7
ORfreebsdfreebsdMatch4.8
ORfreebsdfreebsdMatch4.9
ORfreebsdfreebsdMatch4.10
ORfreebsdfreebsdMatch4.11
ORfreebsdfreebsdMatch5.1
ORfreebsdfreebsdMatch5.2
ORfreebsdfreebsdMatch5.3
ORfreebsdfreebsdMatch5.4
Related
cvelist
cvelist
CVE-2005-1399
2022-10-03 16:22:43
ubuntucve
ubuntucve
CVE-2005-1399
2005-05-06 00:00:00
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-05:06.iir.asc)
2008-09-04 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-05:06.iir.asc)
2008-09-04 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-05:06.iir
2005-05-06 00:00:00
nvd
nvd
CVE-2005-1399
2005-05-06 04:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2005-1399