K5835: Security Advisory: Possible kernel memory vulnerability in the sendfile() system call - CVE-2005-0708

Security Advisory Description Note : Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about F5 Networks' security policy regarding evaluating older and unsupported versions of F5 Networks products, refer to K4602:...

SOL5835 - Security Advisory: Possible kernel memory vulnerability in the sendfile() system call - CVE-2005-0708

Vulnerability description The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information. Information about this advisory is available a...

CVE-2005-0708

CVE-2005-0708 affects FreeBSD 4.8–4.11 and 5–5.4. The flaw lies in the sendfile(2) system call: if the file being transmitted is truncated after transmission has started, sendfile may expose portions of kernel memory to remote observers, enabling disclosure of sensitive information. According to ...