CVE-2006-4178
FreeBSD < 5.5 - Denial of Service via i386_set_ldt Integer Signedness Error
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4178. PoCs published by Adriano Lima.
AI-analyzed exploit summary This exploit triggers a local denial-of-service vulnerability in FreeBSD by passing invalid arguments to the i386_set_ldt function, causing the system to crash. The code leverages an input-validation flaw in the handling of integers.
Description
Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) via unspecified arguments that use negative signed integers to cause the bzero function to be called with a large length parameter, a different vulnerability than CVE-2006-4172.
Exploits (1)
This exploit triggers a local denial-of-service vulnerability in FreeBSD by passing invalid arguments to the i386_set_ldt function, causing the system to crash. The code leverages an input-validation flaw in the handling of integers.