{"api_version":"1","generated_at":"2026-07-23T08:54:34+00:00","cve":"CVE-2006-0380","urls":{"html":"https://cve.report/CVE-2006-0380","api":"https://cve.report/api/cve/CVE-2006-0380.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0380","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0380"},"summary":{"title":"CVE-2006-0380","description":"A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.","state":"PUBLISHED","assigner":"freebsd","published_at":"2006-01-25 22:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"2.1","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/16373","name":"http://www.securityfocus.com/bid/16373","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"FreeBSD Multiple Local Kernel Memory Disclosure Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1015541","name":"http://securitytracker.com/id?1015541","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - FreeBSD Kernel ioctl() Functions May Disclose Kernel Memory to Local Users","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18599","name":"http://secunia.com/advisories/18599","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"FreeBSD Kernel Memory Disclosure Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/22731","name":"http://www.osvdb.org/22731","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc","name":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"404","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24340","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24340","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0380","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0380","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"380","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"5.4","cpe7":"stable","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"380","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.0","cpe7":"stable","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"380","cve":"CVE-2006-0380","epss":"0.000780000","percentile":"0.232040000","score_date":"2026-04-16","updated_at":"2026-04-17 00:09:25"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:34:14.808Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"FreeBSD-SA-06:06","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"],"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc"},{"name":"18599","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18599"},{"name":"1015541","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015541"},{"name":"22731","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/22731"},{"name":"bsd-buffer-length-disclosure(24340)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24340"},{"name":"16373","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16373"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-01-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"63664ac6-956c-4cba-a5d0-f46076e16109","shortName":"freebsd"},"references":[{"name":"FreeBSD-SA-06:06","tags":["vendor-advisory","x_refsource_FREEBSD"],"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc"},{"name":"18599","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18599"},{"name":"1015541","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015541"},{"name":"22731","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/22731"},{"name":"bsd-buffer-length-disclosure(24340)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24340"},{"name":"16373","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16373"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secteam@freebsd.org","ID":"CVE-2006-0380","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"FreeBSD-SA-06:06","refsource":"FREEBSD","url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc"},{"name":"18599","refsource":"SECUNIA","url":"http://secunia.com/advisories/18599"},{"name":"1015541","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015541"},{"name":"22731","refsource":"OSVDB","url":"http://www.osvdb.org/22731"},{"name":"bsd-buffer-length-disclosure(24340)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24340"},{"name":"16373","refsource":"BID","url":"http://www.securityfocus.com/bid/16373"}]}}}},"cveMetadata":{"assignerOrgId":"63664ac6-956c-4cba-a5d0-f46076e16109","assignerShortName":"freebsd","cveId":"CVE-2006-0380","datePublished":"2006-01-25T22:00:00.000Z","dateReserved":"2006-01-24T00:00:00.000Z","dateUpdated":"2024-08-07T16:34:14.808Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-01-25 22:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*","matchCriteriaId":"60F7B4A9-4036-4061-8F3D-BDC3F1282EC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*","matchCriteriaId":"C07C3BEF-8D6A-4F23-96DE-AFE4369D08EF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"380","Ordinal":"1","Title":"CVE-2006-0380","CVE":"CVE-2006-0380","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"380","Ordinal":"1","NoteData":"A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.","Type":"Description","Title":"CVE-2006-0380"},{"CveYear":"2006","CveId":"380","Ordinal":"2","NoteData":"2006-01-25","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"380","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}