Vulnerability in Freebsd

CVE-2005-1399

FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.

EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 4.6, 4.7, 4.8
  • N/a — versions n/a