CVE-2005-1399

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-06 · updated 2026-06-16

Description

FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver.

Affected products

FreeBSD: 4.6, 4.7, 4.8, 4.9, 4.10, 4.11 (+4)

References

Get alerted when CVE-2005-1399 or the next vulnerability affects your stack