4.9

CVE-2009-1436

Exploit

The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.

Data is provided by the National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version6.3
Freebsd ≫ Freebsd Version6.3 Updaterelease_p10
Freebsd ≫ Freebsd Version6.4
Freebsd ≫ Freebsd Version6.4 Updaterelease_p4
Freebsd ≫ Freebsd Version6.4 Updatestable
Freebsd ≫ Freebsd Version7.0
Freebsd ≫ Freebsd Version7.0 Updaterelease-p12
Freebsd ≫ Freebsd Version7.1
Freebsd ≫ Freebsd Version7.1 Updaterelease-p5
Freebsd ≫ Freebsd Version7.2 Updatepre-release
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.19% 0.372
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.