Vulnerability in Bsd

CVE-1999-1214

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.

EPSS: 0.003 (22.2th percentile) — read the EPSS interpretation.

Affected products

Bsd — versions 4.4
Freebsd — versions 6.2
Netbsd — versions 2.0.4
Openbsd — versions 2.1
Sgi Irix
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cve@mitre.org (vendor-advisory, x_refsource_MISC, x_refsource_OPENBSD)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (vdb-entry, x_refsource_XF)