Vulnerability in Dragonflybsd
CVE-2005-0708
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
EPSS: 0.023 (81.2th percentile) — read the EPSS interpretation.
Affected products
- Dragonflybsd — versions 1.0, 1.1
- Freebsd — versions 4.0, 4.1, 4.1.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_FREEBSD, vendor-advisory)