CVE-2004-1066: Freebsd

Low severity, CVSS 3.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.

Affected products

• Freebsd Freebsd: version 4.0 only; version 4.1 only; version 4.1.1 only; version 4.2 only; version 4.3 only; version 4.4 only; …

Published 2005-01-10. Last modified 2026-06-16.