CVE-2005-4352

The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting restrictions and set the clock backwards by setting the clock ahead to the maximum unixtime value (19 Jan 2038), which then wraps around to the minimum value (13 Dec 1901), which can then be set ahead to the desired time, aka "settimeofday() time wrap."

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/25691
• http://securitytracker.com/id?1015454
• http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txtExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/421426/100/0/threaded
• http://www.securityfocus.com/archive/1/471457
• http://www.securityfocus.com/bid/16170Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24036
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041178.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/25691
• http://securitytracker.com/id?1015454
• http://www.redteam-pentesting.de/advisories/rt-sa-2005-16.txtExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/421426/100/0/threaded
• http://www.securityfocus.com/archive/1/471457
• http://www.securityfocus.com/bid/16170Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24036

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4346Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and…
• CVE-2005-4347The Linux 2.4 kernel patch in kernel-patch-vserver before 1.…
• CVE-2005-4348fetchmail before 6.3.1 and before 6.2.5.5, when configured f…
• CVE-2005-4349SQL injection vulnerability in server_privileges.php in phpM…6.3
• CVE-2005-4350Unspecified vulnerability in WBEM Services A.01.x before A.0…
• CVE-2005-4351The securelevels implementation in FreeBSD 7.0 and earlier, …
• CVE-2005-4353SQL injection vulnerability in index.php in toendaCMS 0.6.2.…
• CVE-2005-4354Cross-site scripting (XSS) vulnerability in webglimpse.cgi i…
• CVE-2005-4355Multiple cross-site scripting (XSS) vulnerabilities in UStor…
• CVE-2005-4356SQL injection vulnerability in UStore allows remote attacker…
• CVE-2005-4357Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, wh…
• CVE-2005-4358admin/admin_disallow.php in phpBB 2.0.18 allows remote attac…