Lucene search

[email protected]NVD:CVE-2009-2793

HistorySep 18, 2009 - 10:30 p.m.

CVE-2009-2793

2009-09-1822:30:00

CWE-264

[email protected]

web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits.

Affected configurations

NVD

Node

netbsdnetbsdRange≤5.0.1

netbsdnetbsdMatch0.8

netbsdnetbsdMatch0.9

netbsdnetbsdMatch1.0

netbsdnetbsdMatch1.1

netbsdnetbsdMatch1.2

netbsdnetbsdMatch1.2.1

netbsdnetbsdMatch1.3

netbsdnetbsdMatch1.3.1

netbsdnetbsdMatch1.3.2

netbsdnetbsdMatch1.3.3

netbsdnetbsdMatch1.5

netbsdnetbsdMatch1.5.1

netbsdnetbsdMatch1.5.2

netbsdnetbsdMatch1.5.3

netbsdnetbsdMatch1.6

netbsdnetbsdMatch1.6.1

netbsdnetbsdMatch1.6.2

netbsdnetbsdMatch2.0

netbsdnetbsdMatch2.0.1

netbsdnetbsdMatch2.0.2

netbsdnetbsdMatch2.0.3

netbsdnetbsdMatch2.1

netbsdnetbsdMatch3.0

netbsdnetbsdMatch3.0.1

netbsdnetbsdMatch3.0.2

netbsdnetbsdMatch3.1

netbsdnetbsdMatch4.0

netbsdnetbsdMatch4.0.1

netbsdnetbsdMatch5.0

References

www.securityfocus.com/archive/1/506531/100/0/threaded

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for NVD:CVE-2009-2793

cvelist1 prion1 seebug1 cve1