CVE-2003-1289

The CVE-2003-1289 issue affects the iBCS2 system call translator for statfs in NetBSD 1.5–1.5.3 and FreeBSD 4 (up to 4.8-RELEASE-p2) and 5 (up to 5.1-RELEASE-p1). The underlying flaw allows local users to read portions of kernel memory (memory disclosure) via a large length parameter that copies ...