Unscored severity · published Dec 31, 2005
CVE-2005-4352
The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; 2.6.0; +34 more · source: NVD
NE
Netbsd · Netbsd
1.6; 1.6; 1.6.1; 1.6.2; 2.0; 2.0.1; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4352
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4352
Exploit
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.html
secunia.com
http://secunia.com/advisories/25691
securitytracker.com
http://securitytracker.com/id?1015454
Exploit
http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/421426/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/471457
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability