Summary
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:08.kmem.asc
Solution
Upgrade your system to the appropriate stable release or security branch dated after the correction date
https://secure1.securityspace.com/smysecure/catid.html?in=FreeBSD-SA-05:08.kmem.asc
Insight
In many parts of the FreeBSD kernel, names (of mount points, devices, files, etc.) are manipulated as NULL-terminated strings, but are provided to applications within fixed-length buffers.
In several places, variable-length strings were copied into fixed-length buffers without zeroing the unused portion of the buffer.
Severity
Classification
-
CVE CVE-2005-1406 -
CVSS Base Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities