2.1

CVE-2005-4352

Exploit
The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version 2.6.0
Linux ≫ Linux Kernel Version 2.6.0 Update test1
Linux ≫ Linux Kernel Version 2.6.0 Update test10
Linux ≫ Linux Kernel Version 2.6.0 Update test11
Linux ≫ Linux Kernel Version 2.6.0 Update test2
Linux ≫ Linux Kernel Version 2.6.0 Update test3
Linux ≫ Linux Kernel Version 2.6.0 Update test4
Linux ≫ Linux Kernel Version 2.6.0 Update test5
Linux ≫ Linux Kernel Version 2.6.0 Update test6
Linux ≫ Linux Kernel Version 2.6.0 Update test7
Linux ≫ Linux Kernel Version 2.6.0 Update test8
Linux ≫ Linux Kernel Version 2.6.0 Update test9
Linux ≫ Linux Kernel Version 2.6.1
Linux ≫ Linux Kernel Version 2.6.1 Update rc1
Linux ≫ Linux Kernel Version 2.6.1 Update rc2
Linux ≫ Linux Kernel Version 2.6.2
Linux ≫ Linux Kernel Version 2.6.3
Linux ≫ Linux Kernel Version 2.6.4
Linux ≫ Linux Kernel Version 2.6.5
Linux ≫ Linux Kernel Version 2.6.6
Linux ≫ Linux Kernel Version 2.6.6 Update rc1
Linux ≫ Linux Kernel Version 2.6.7
Linux ≫ Linux Kernel Version 2.6.7 Update rc1
Linux ≫ Linux Kernel Version 2.6.8
Linux ≫ Linux Kernel Version 2.6.8 Update rc1
Linux ≫ Linux Kernel Version 2.6.8 Update rc2
Linux ≫ Linux Kernel Version 2.6.8 Update rc3
Linux ≫ Linux Kernel Version 2.6.9 Update 2.6.20
Linux ≫ Linux Kernel Version 2.6.10
Linux ≫ Linux Kernel Version 2.6.10 Update rc2
Linux ≫ Linux Kernel Version 2.6.11
Linux ≫ Linux Kernel Version 2.6.11 Update rc2
Linux ≫ Linux Kernel Version 2.6.11 Update rc3
Linux ≫ Linux Kernel Version 2.6.11 Update rc4
Linux ≫ Linux Kernel Version 2.6.11.5
Linux ≫ Linux Kernel Version 2.6.11.6
Linux ≫ Linux Kernel Version 2.6.11.7
Linux ≫ Linux Kernel Version 2.6.11.8
Linux ≫ Linux Kernel Version 2.6.11.11
Linux ≫ Linux Kernel Version 2.6.11.12
Linux ≫ Linux Kernel Version 2.6.12 Update rc1
Linux ≫ Linux Kernel Version 2.6.12 Update rc4
Linux ≫ Linux Kernel Version 2.6.12 Update rc5
Linux ≫ Linux Kernel Version 2.6.12.1
Linux ≫ Linux Kernel Version 2.6.12.2
Linux ≫ Linux Kernel Version 2.6.12.3
Linux ≫ Linux Kernel Version 2.6.12.4
Linux ≫ Linux Kernel Version 2.6.12.5
Linux ≫ Linux Kernel Version 2.6.12.6
Linux ≫ Linux Kernel Version 2.6.13
Linux ≫ Linux Kernel Version 2.6.13 Update rc1
Linux ≫ Linux Kernel Version 2.6.13 Update rc4
Linux ≫ Linux Kernel Version 2.6.13 Update rc6
Linux ≫ Linux Kernel Version 2.6.13 Update rc7
Linux ≫ Linux Kernel Version 2.6.13.1
Linux ≫ Linux Kernel Version 2.6.13.2
Linux ≫ Linux Kernel Version 2.6.13.3
Linux ≫ Linux Kernel Version 2.6.13.4
Linux ≫ Linux Kernel Version 2.6.14
Linux ≫ Linux Kernel Version 2.6.14 Update rc1
Linux ≫ Linux Kernel Version 2.6.14 Update rc2
Linux ≫ Linux Kernel Version 2.6.14 Update rc3
Linux ≫ Linux Kernel Version 2.6.14 Update rc4
Linux ≫ Linux Kernel Version 2.6.14.1
Linux ≫ Linux Kernel Version 2.6.14.2
Linux ≫ Linux Kernel Version 2.6.14.3
Linux ≫ Linux Kernel Version 2.6.15
Linux ≫ Linux Kernel Version 2.6.15 Update rc1
Linux ≫ Linux Kernel Version 2.6.15 Update rc3
Linux ≫ Linux Kernel Version 2.6_test9_cvs
Netbsd ≫ Netbsd Version 1.6
Netbsd ≫ Netbsd Version 1.6 Update beta
Netbsd ≫ Netbsd Version 1.6.1
Netbsd ≫ Netbsd Version 1.6.2
Netbsd ≫ Netbsd Version 2.0
Netbsd ≫ Netbsd Version 2.0.1
Netbsd ≫ Netbsd Version 2.0.2
Netbsd ≫ Netbsd Version 2.0.3
Netbsd ≫ Netbsd Version 2.1
Netbsd ≫ Netbsd Version current
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.371
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html
Vendor Advisory
Exploit
http://secunia.com/advisories/25691
http://securitytracker.com/id?1015454
http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt
Vendor Advisory
Exploit
http://www.securityfocus.com/archive/1/421426/100/0/threaded
http://www.securityfocus.com/archive/1/471457
http://www.securityfocus.com/bid/16170
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/24036