CVE-2006-5679

FreeBSD 6.1 - Denial of Service via ffs_mountfs Integer Overflow

Title source: llm
STIX 2.1

Description

Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.

References (11)

Core 11
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22736
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=305214
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017751
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20918
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0930
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/552136
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24479

Scores

EPSS 0.0017
EPSS Percentile 37.7%

Details

CWE
CWE-189
Status published
Products (1)
freebsd/freebsd 6.1
Published Nov 03, 2006
Tracked Since Feb 18, 2026