CVE-2006-6653

The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka "a dangling socket").

Score

CVSS 2.0 1.7 Low

Status

Modified - cve@mitre.org

Published

2006-12-20

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Netbsd (Netbsd)

References

• http://securitytracker.com/id?1017293