CVE-2006-6013
- State
- Published
- Severity
- Not scored
- Published
- Nov 21, 2006
- Updated
- Aug 7, 2024
- Reserved
- Nov 21, 2006
Description
Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c) in various BSD kernels, including DragonFlyBSD, FreeBSD 5.5, MidnightBSD 0.1-CURRENT before 20061115, NetBSD-current before 20061116, NetBSD-4 before 20061203, and TrustedBSD, allows local users to read arbitrary memory contents via certain negative values of crom_buf->len in an FW_GCROM command. NOTE: this issue has been labeled as an integer overflow, but it is more like an integer signedness error.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20061116 Re: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- 1017344vdb-entry
- 20061115 NetBSD all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- 20061115 NetBSD all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- [tech-security] 20061116 Re: [Full-disclosure] NetBSD all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- FreeBSD-SA-06:25vendor-advisory
- freebsd-fwdev-integer-overflow(30347)vdb-entry
- 20061121 Clarifying integer overflows vs. signedness errorsmailing-list
- 20061122 Re: Clarifying integer overflows vs. signedness errorsmailing-list
- 20061120 RE: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- [tech-security] 20061214 NetBSD Security Note 20061214-1: Kernel memory leakage in firewire interfacemailing-list
- http://www.dragonflybsd.org/cvsweb/src/sys/bus/firewire/fwdev.c
- 21089vdb-entry
- 22917third-party-advisory
- 20061115 TrustedBSD* all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/ieee1394/fwdev.c
- 20061115 DragonFlyBSD all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- 20061115 FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousuremailing-list
- http://www.kernelhacking.com/bsdadv1.txt
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.