CVE-2005-4352

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-31 · updated 2026-06-16

Description

The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."

Affected products

Linux kernel: 2.6.0, 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3 (+64)
Netbsd: 1.6, 1.6-beta, 1.6.1, 1.6.2, 2.0, 2.0.1 (+4)

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html
http://secunia.com/advisories/25691
http://securitytracker.com/id?1015454
http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt
http://www.securityfocus.com/archive/1/421426/100/0/threaded
http://www.securityfocus.com/archive/1/471457
http://www.securityfocus.com/bid/16170
https://exchange.xforce.ibmcloud.com/vulnerabilities/24036
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html
http://secunia.com/advisories/25691
http://securitytracker.com/id?1015454
http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt

Get alerted when CVE-2005-4352 or the next vulnerability affects your stack