VYPR
Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Apr 16, 2026

CVE-2004-1066

CVE-2004-1066

Description

The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.

Affected products

25
  • FreeBSD/FreeBSD23 versions
    cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*
  • FreeBSD/linprocfsllm-create
    Range: >=5.0 <=5.3
  • NetBSD/procfsllm-fuzzy
    Range: >=4.8 <=5.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.