Vulnerability Details : CVE-2002-1490
NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2002-1490
- cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4:*:x86:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.1:*:x86:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.1:*:alpha:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.2:*:arm32:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.2:*:x86:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.1:*:arm32:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.1:*:sparc:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.2:*:alpha:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.2:*:sparc:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.5:*:sh3:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4.1:*:sh3:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.5:*:x86:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4:*:arm32:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4:*:sparc:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.4:*:alpha:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2002-1490
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-1490
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST |
References for CVE-2002-1490
-
http://www.iss.net/security_center/static/10115.php
Patch;Vendor Advisory
-
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-007.txt.asc
-
http://www.securityfocus.com/bid/5722
Patch;Vendor Advisory
Jump to