CVE Database
/

CVE-2009-1436

Back to search

CVE-2009-1436

Published: Apr 27, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.

VendorProductVersions

n/a

n/a

affected
n/a

References

34666
vdb-entry
x_refsource_BID
53918
vdb-entry
x_refsource_OSVDB
FreeBSD-SA-09:07
vendor-advisory
x_refsource_FREEBSD
34810
third-party-advisory
x_refsource_SECUNIA
1022113
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now