CVE-2001-1559

The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*
cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*

History

16 Feb 2024, 14:16

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-476
CVSS v2 : 2.1
v3 : unknown
v2 : 2.1
v3 : 5.5
References () http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html - Exploit () http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html - Broken Link, Exploit
References () http://monkey.org/openbsd/archive/tech/0112/msg00015.html - Exploit () http://monkey.org/openbsd/archive/tech/0112/msg00015.html - Broken Link, Exploit
References () http://www.iss.net/security_center/static/7690.php - () http://www.iss.net/security_center/static/7690.php - Broken Link

Information

Published : 2001-12-31 05:00

Updated : 2024-02-16 14:16


NVD link : CVE-2001-1559

Mitre link : CVE-2001-1559

CVE.ORG link : CVE-2001-1559


JSON object : View

Products Affected

openbsd

  • openbsd
CWE
CWE-476

NULL Pointer Dereference