CVE-2009-1436
MEDIUM 4.9EPSS 0.9%
The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.
- CVSS v2.0 NVD
- 4.9 MEDIUM
AV:L/AC:L/Au:N/C:C/I:N/A:N - EPSS
- 0.89% chance of exploitation in the next 30 days, 59th percentile
- Published
- 2009-04-27
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/34810
- http://security.freebsd.org/advisories/FreeBSD-SA-09:07.libc.asc
- http://www.securityfocus.com/bid/34666