Description
Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-4178.
References
- freebsd-i386setldt-overflow(29132) vdb-entry
- 20060925 iDefense Security Advisory 09.23.06: FreeBSD i386_set_ldt Integer Overflow Vulnerability mailing-list
- 1016926 vdb-entry
- 22064 third-party-advisory
- 20158 vdb-entry
- 1016928 vdb-entry
- 20060923 FreeBSD i386_set_ldt Integer Overflow Vulnerability third-party-advisory
- 20060923 [RISE-2006002] FreeBSD 5.x kernel i386_set_ldt() integer overflow vulnerability mailing-list