CVE-2005-1399
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2005-1399
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
FreeBSD IIR驱动错误权限漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FreeBSD就是一种运行在Intel平台上，可以自由使用的Unix系统。 FreeBSD系统的某些设备驱动程序访问控制实现上存在漏洞，攻击者可能利用来非法获取内存信息。 iir(4)驱动支持Intel集成的RAID控制器和ICP Vortex RAID控制器。/dev/iir设备节点的默认权限允许本地非特权用户打打开设备并执行ioctl调用，这样攻击者就可以向iir(4)驱动支持的硬件发送命令，导致数据破坏并可能泄漏数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2005-1399
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2005-1399
Please Login to view more intelligence information
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.ascvendor-advisoryx_refsource_FREEBSD
- https://nvd.nist.gov/vuln/detail/CVE-2005-1399
Same Patch Batch · n/a · 2005-05-06 · 4 CVEs total
| CVE-2005-1400 | FreeBSD i386_get_ldt本地Kernel内存泄露漏洞 | |
| CVE-2005-1406 | Apple Mac OS X 多个本地安全漏洞 | |
| CVE-2005-1471 | RSA SecurID Web Agent堆溢出漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2005-1399
No comments yet