Test ID:	1.3.6.1.4.1.25623.1.0.63704
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Security Advisory (FreeBSD-SA-09:06.ktimer.asc)
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-09:06.ktimer.asc
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:06.ktimer.asc Vulnerability Insight: In FreeBSD 7.0, support was introduced for per-process timers as defined in the POSIX realtime extensions. This allows a process to have a limited number of timers running at once, with various actions taken when each timer reaches zero. An integer which specifies which timer a process wishes to operate upon is not properly bounds-checked. Solution: Upgrade your system to the appropriate stable release or security branch dated after the correction date. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1041 BugTraq ID: 34196 http://www.securityfocus.com/bid/34196 https://www.exploit-db.com/exploits/8261 FreeBSD Security Advisory: FreeBSD-SA-09:06 http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc http://www.securitytracker.com/id?1021882 XForce ISS Database: freebsd-ktimer-memory-overwrite(49362) https://exchange.xforce.ibmcloud.com/vulnerabilities/49362
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.