vulnwire
2.1low

CVE-2005-4352

The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrict…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 41%
Public exploits
0
none known

The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."

Exploit prediction (EPSS)

0.47% probability of exploitation in the next 30 days, higher than 41% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:P/A:N

Classification

Technology feeds
Linux kernel (RSS, critical only)

References

  • securityfocus.com /archive/1/421426/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2006-January/041178.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • redteam-pentesting.de /advisories/rt-sa-2005-16.txt · x_refsource_MISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/24036 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/16170 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /archive/1/471457 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securitytracker.com /id?1015454 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/25691 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.