VULNERABILITY INTELLIGENCE

CVE-2005-1399

CVSS score4.6 MEDIUM

EPSS probability0.36%

CISA KEVNot currently listed

Published2005-05-06

Last modified2026-06-16

CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.