VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
CVE-2010-2530
netbsd, freebsd, mac_os_x: Multiple integer signedness errors in smb_subr.c in...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2530

Original

Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-09-29
Source Information Category:
Advisory, Alert
Last Updated:
2010-09-30




Affected Product Tags
cpe:/o:apple:mac_os_x
cpe:/o:freebsd:freebsd
cpe:/o:netbsd:netbsd:0.8
cpe:/o:netbsd:netbsd:0.9
cpe:/o:netbsd:netbsd:1.0
cpe:/o:netbsd:netbsd:1.1
cpe:/o:netbsd:netbsd:1.2
cpe:/o:netbsd:netbsd:1.2.1
cpe:/o:netbsd:netbsd:1.3
cpe:/o:netbsd:netbsd:1.3.1
cpe:/o:netbsd:netbsd:1.3.2
cpe:/o:netbsd:netbsd:1.3.3
cpe:/o:netbsd:netbsd:1.4
cpe:/o:netbsd:netbsd:1.4.1
cpe:/o:netbsd:netbsd:1.4.2
cpe:/o:netbsd:netbsd:1.4.3
cpe:/o:netbsd:netbsd:1.5
cpe:/o:netbsd:netbsd:1.5.1
cpe:/o:netbsd:netbsd:1.5.2
cpe:/o:netbsd:netbsd:1.5.3
cpe:/o:netbsd:netbsd:1.6
cpe:/o:netbsd:netbsd:1.6.1
cpe:/o:netbsd:netbsd:1.6.2
cpe:/o:netbsd:netbsd:1.6:beta
cpe:/o:netbsd:netbsd:2.0
cpe:/o:netbsd:netbsd:2.0.1
cpe:/o:netbsd:netbsd:2.0.2
cpe:/o:netbsd:netbsd:2.0.3
cpe:/o:netbsd:netbsd:2.0.4
cpe:/o:netbsd:netbsd:2.1
cpe:/o:netbsd:netbsd:2.1.1
cpe:/o:netbsd:netbsd:3.0
cpe:/o:netbsd:netbsd:3.0.1
cpe:/o:netbsd:netbsd:3.0.2
cpe:/o:netbsd:netbsd:3.1
cpe:/o:netbsd:netbsd:3.99.15
cpe:/o:netbsd:netbsd:4.0.1
cpe:/o:netbsd:netbsd:4.0:beta
cpe:/o:netbsd:netbsd:4.0:beta2
cpe:/o:netbsd:netbsd:5.0
cpe:/o:netbsd:netbsd:5.0.1
cpe:/o:netbsd:netbsd:5.0.2 and previous versions
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

X Local [?]
Adjacent Network [?]
Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]

[Confidentiality Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Integrity Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

Alternatives




References
BID 41557




CONFIRM http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netsmb/smb_subr.c.diff?r1=1.34&r2=1.35&only_with_tag=MAIN&f=h




MLIST [oss-security] 20100716 Re: CVE request: NetSMB BSD kernel module (minor)




MLIST [oss-security] 20100712 CVE request: NetSMB BSD kernel module (minor)




Vulnerability Type Numeric Errors (CWE-189)





Copyright © 2010 JPCERT/CC All Rights Reserved.