Vulnerability-Lookup

BDU:2015-03166 (CVE-2004-0887)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2024-07-05 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации

Summary

Множественные уязвимости пакета i2c-2.4.27-3-386 операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Software update

Aliases

CVE-2004-0887, CVE-2004-1058, CVE-2004-2607, CVE-2005-0449, CVE-2005-1761, CVE-2005-2457, CVE-2005-2555, CVE-2005-2709, CVE-2005-2973, CVE-2005-3257, CVE-2005-3783, CVE-2005-3806, CVE-2005-3848, CVE-2005-3857, CVE-2005-3858, CVE-2005-4618, DSA-1018, ID:1401638

References

17 references

URL
http://www.debian.org/security/dsa-1018/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2607
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0449
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2457
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3848
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3257
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4618
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3783
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3806
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2973
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0887
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1761

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 3.1 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 3.1: ppc: kernel-patch-2.4.27-powerpc - 2.4.27-10sarge2 kernel-headers-2.4.27-powerpc - 2.4.27-10sarge2 kernel-image-2.4.27-nubus - 2.4.27-10sarge2 kernel-image-2.4.27-powerpc-small - 2.4.27-10sarge2 kernel-patch-2.4.27-nubus - 2.4.27-10sarge2 kernel-patch-2.4.27-apus - 2.4.27-10sarge2 kernel-image-2.4.27-apus - 2.4.27-10sarge2 kernel-build-2.4.27-powerpc-small - 2.4.27-10sarge2 kernel-image-2.4.27-powerpc - 2.4.27-10sarge2 kernel-build-2.4.27-apus - 2.4.27-10sarge2 kernel-build-2.4.27-powerpc - 2.4.27-10sarge2 kernel-headers-2.4.27-nubus - 2.4.27-10sarge2 kernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-apus - 2.4.27-10sarge2 kernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge2 kernel-build-2.4.27-nubus - 2.4.27-10sarge2 s390x: kernel-image-2.4-s390x - 2.4.27-1sarge1 kernel-image-2.4.27-3-s390 - 2.4.27-2sarge2 kernel-image-2.4-s390 - 2.4.27-1sarge1 kernel-image-2.4.27-3-s390x - 2.4.27-2sarge2 kernel-headers-2.4.27-3 - 2.4.27-2sarge2 kernel-headers-2.4-s390 - 2.4.27-1sarge1 kernel-image-2.4.27-3-s390-tape - 2.4.27-2sarge2 m68k: kernel-image-2.4.27-mvme147 - 2.4.27-3sarge2 kernel-image-2.4.27-amiga - 2.4.27-3sarge2 kernel-image-2.4.27-mvme16x - 2.4.27-3sarge2 kernel-image-2.4.27-bvme6000 - 2.4.27-3sarge2 kernel-image-2.4.27-q40 - 2.4.27-3sarge2 kernel-image-2.4.27-atari - 2.4.27-3sarge2 kernel-image-2.4.27-mac - 2.4.27-3sarge2 i686: kernel-image-2.4.27-speakup - 2.4.27-1.1sarge1 kernel-headers-2.4.27-3 - 2.4.27-10sarge2 kernel-image-2.4.27-3-686 - 2.4.27-10sarge2 kernel-headers-2.4-686-smp - 101sarge1 lm-sensors-2.4.27-3-k6 - 2.9.1-1sarge3 kernel-image-2.4-k6 - 101sarge1 kernel-headers-2.4.27-3-586tsc - 2.4.27-10sarge2 pcmcia-modules-2.4.27-3-k7 - 3.2.5+2sarge1 kernel-image-2.4.27-3-386 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-k7-smp - 2.4.27-10sarge2 kernel-pcmcia-modules-2.4-386 - 101sarge1 lm-sensors-2.4.27-3-586tsc - 2.9.1-1sarge3 kernel-pcmcia-modules-2.4.27-3-386 - 2.4.27-10sarge2 lm-sensors-2.4.27-3-686-smp - 2.9.1-1sarge3 kernel-image-2.4-586tsc - 101sarge1 pcmcia-modules-2.4.27-3-686-smp - 3.2.5+2sarge1 pcmcia-modules-2.4.27-3-386 - 3.2.5+2sarge1 pcmcia-modules-2.4.27-3-586tsc - 3.2.5+2sarge1 kernel-pcmcia-modules-2.4.27-3-k7 - 2.4.27-10sarge2 kernel-headers-2.4-386 - 101sarge1 kernel-pcmcia-modules-2.4.27-3-686 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-386 - 2.4.27-10sarge2 kernel-headers-2.4-686 - 101sarge1 kernel-image-2.4.27-3-586tsc - 2.4.27-10sarge2 mindi-kernel - 2.4.27-2sarge1 i2c-2.4.27-3-386 - 2.9.1-1sarge1 lm-sensors-2.4.27-3-386 - 2.9.1-1sarge3 kernel-pcmcia-modules-2.4.27-3-k7-smp - 2.4.27-10sarge2 kernel-headers-2.4-k7-smp - 101sarge1 kernel-pcmcia-modules-2.4.27-3-586tsc - 2.4.27-10sarge2 kernel-image-2.4.27-3-k7-smp - 2.4.27-10sarge2 kernel-image-2.4-k7 - 101sarge1 pcmcia-modules-2.4.27-3-686 - 3.2.5+2sarge1 i2c-2.4.27-3-k6 - 2.9.1-1sarge1 kernel-headers-2.4-586tsc - 101sarge1 kernel-pcmcia-modules-2.4-k7-smp - 101sarge1 kernel-headers-2.4.27-3-686 - 2.4.27-10sarge2 kernel-pcmcia-modules-2.4-586tsc - 101sarge1 kernel-pcmcia-modules-2.4.27-3-k6 - 2.4.27-10sarge2 kernel-pcmcia-modules-2.4-686 - 101sarge1 kernel-image-2.4-386 - 101sarge1 kernel-image-2.4-686 - 101sarge1 kernel-image-2.4-686-smp - 101sarge1 kernel-image-2.4-k7-smp - 101sarge1 kernel-pcmcia-modules-2.4-686-smp - 101sarge1 libsensors-dev - 2.9.1-1sarge3 kernel-image-2.4.27-3-k6 - 2.4.27-10sarge2 i2c-2.4.27-3-k7-smp - 2.9.1-1sarge1 kernel-pcmcia-modules-2.4-k6 - 101sarge1 kernel-pcmcia-modules-2.4-k7 - 101sarge1 i2c-2.4.27-3-586tsc - 2.9.1-1sarge1 kernel-image-2.4.27-3-686-smp - 2.4.27-10sarge2 lm-sensors-2.4.27-3-686 - 2.9.1-1sarge3 sensord - 2.9.1-1sarge3 pcmcia-modules-2.4.27-3-k6 - 3.2.5+2sarge1 kernel-pcmcia-modules-2.4.27-3-686-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-speakup - 2.4.27-1.1sarge1 kernel-headers-2.4.27-3-686-smp - 2.4.27-10sarge2 lm-sensors-2.4.27-3-k7 - 2.9.1-1sarge3 kernel-headers-2.4.27-3-k6 - 2.4.27-10sarge2 lm-sensors - 2.9.1-1sarge3 kernel-headers-2.4-k6 - 101sarge1 i2c-2.4.27-3-686 - 2.9.1-1sarge1 i2c-2.4.27-3-686-smp - 2.9.1-1sarge1 kernel-build-2.4.27-3 - 2.4.27-10sarge2 lm-sensors-2.4.27-3-k7-smp - 2.9.1-1sarge3 i2c-2.4.27-3-k7 - 2.9.1-1sarge1 kernel-image-2.4.27-3-k7 - 2.4.27-10sarge2 kernel-headers-2.4-k7 - 101sarge1 pcmcia-modules-2.4.27-3-k7-smp - 3.2.5+2sarge1 kernel-headers-2.4.27-3-k7 - 2.4.27-10sarge2 libsensors3 - 2.9.1-1sarge3 sparc: kernel-image-2.4-sparc32 - 42sarge1 kernel-image-2.4.27-3-sparc32-smp - 2.4.27-9sarge2 kernel-image-2.4-sparc64-smp - 42sarge1 kernel-image-2.4.27-3-sparc32 - 2.4.27-9sarge2 kernel-headers-2.4.27-3-sparc64-smp - 2.4.27-9sarge2 kernel-headers-2.4.27-3-sparc32 - 2.4.27-9sarge2 kernel-headers-2.4.27-3-sparc64 - 2.4.27-9sarge2 kernel-build-2.4.27-3 - 2.4.27-9sarge2 kernel-image-2.4-sparc32-smp - 42sarge1 kernel-headers-2.4-sparc32-smp - 42sarge1 kernel-image-2.4.27-3-sparc64 - 2.4.27-9sarge2 kernel-image-2.4.27-3-sparc64-smp - 2.4.27-9sarge2 kernel-image-2.4-sparc64 - 42sarge1 kernel-headers-2.4-sparc64 - 42sarge1 kernel-headers-2.4.27-3-sparc32-smp - 2.4.27-9sarge2 kernel-headers-2.4-sparc32 - 42sarge1 kernel-headers-2.4-sparc64-smp - 42sarge1 kernel-headers-2.4.27-3 - 2.4.27-9sarge2 alpha: kernel-headers-2.4.27-3 - 2.4.27-10sarge2 kernel-image-2.4-smp - 101sarge1 kernel-image-2.4-generic - 101sarge1 kernel-image-2.4.27-3-generic - 2.4.27-10sarge2 kernel-image-2.4.27-3-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-3-generic - 2.4.27-10sarge2 kernel-headers-2.4-generic - 101sarge1 kernel-build-2.4.27-3 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-smp - 2.4.27-10sarge2 kernel-headers-2.4-smp - 101sarge1 ia64: kernel-image-2.4.27-3-mckinley-smp - 2.4.27-10sarge2 kernel-image-2.4.27-3-itanium-smp - 2.4.27-10sarge2 kernel-image-2.4-mckinley - 2.4.27-10sarge2 kernel-headers-2.4.27-3-itanium-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-3-mckinley-smp - 2.4.27-10sarge2 kernel-image-2.4-itanium - 2.4.27-10sarge2 kernel-build-2.4.27-3 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-itanium - 2.4.27-10sarge2 kernel-image-2.4-mckinley-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-3 - 2.4.27-10sarge2 kernel-image-2.4-itanium-smp - 2.4.27-10sarge2 kernel-image-2.4.27-3-mckinley - 2.4.27-10sarge2 kernel-headers-2.4.27-3-mckinley - 2.4.27-10sarge2 kernel-image-2.4.27-3-itanium - 2.4.27-10sarge2 mips: kernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1 kernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1 mips-tools - 2.4.27-10.sarge2.040815-1 noarch: kernel-patch-debian-2.4.27 - 2.4.27-10sarge2 lm-sensors-source - 2.9.1-1sarge3 kernel-doc-2.4.27-speakup - 2.4.27-1.1sarge1 systemimager-boot-ia64-standard - 3.2.3-6sarge1 systemimager-boot-i386-standard - 3.2.3-6sarge1 i2c-source - 2.9.1-1sarge1 kernel-doc-2.4.27 - 2.4.27-10sarge2 kernel-tree-2.4.27 - 2.4.27-10sarge2 systemimager-common - 3.2.3-6sarge1 systemimager-doc - 3.2.3-6sarge1 kernel-patch-2.4-i2c - 2.9.1-1sarge1 systemimager-server - 3.2.3-6sarge1 kernel-source-2.4.27 - 2.4.27-10sarge2 systemimager-client - 3.2.3-6sarge1 systemimager-server-flamethrowerd - 3.2.3-6sarge1 kernel-patch-2.4-lm-sensors - 2.9.1-1sarge3 mipsel: kernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge2.040815-1 mips-tools - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1 kernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1 arm: kernel-headers-2.4.27 - 2.4.27-2sarge2 kernel-image-2.4.27-riscpc - 2.4.27-2sarge2 kernel-image-2.4.27-riscstation - 2.4.27-2sarge2 kernel-image-2.4.27-netwinder - 2.4.27-2sarge2 kernel-image-2.4.27-lart - 2.4.27-2sarge2 kernel-build-2.4.27 - 2.4.27-2sarge2 kernel-image-2.4.27-bast - 2.4.27-2sarg

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 3.1 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 3.1:\n\tppc:\n\t\tkernel-patch-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-nubus - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-powerpc-small - 2.4.27-10sarge2\n\t\tkernel-patch-2.4.27-nubus - 2.4.27-10sarge2\n\t\tkernel-patch-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-powerpc-small - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-nubus - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-nubus - 2.4.27-10sarge2\n\ts390x:\n\t\tkernel-image-2.4-s390x - 2.4.27-1sarge1\n\t\tkernel-image-2.4.27-3-s390 - 2.4.27-2sarge2\n\t\tkernel-image-2.4-s390 - 2.4.27-1sarge1\n\t\tkernel-image-2.4.27-3-s390x - 2.4.27-2sarge2\n\t\tkernel-headers-2.4.27-3 - 2.4.27-2sarge2\n\t\tkernel-headers-2.4-s390 - 2.4.27-1sarge1\n\t\tkernel-image-2.4.27-3-s390-tape - 2.4.27-2sarge2\n\tm68k:\n\t\tkernel-image-2.4.27-mvme147 - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-amiga - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-mvme16x - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-bvme6000 - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-q40 - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-atari - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-mac - 2.4.27-3sarge2\n\ti686:\n\t\tkernel-image-2.4.27-speakup - 2.4.27-1.1sarge1\n\t\tkernel-headers-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-686 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-686-smp - 101sarge1\n\t\tlm-sensors-2.4.27-3-k6 - 2.9.1-1sarge3\n\t\tkernel-image-2.4-k6 - 101sarge1\n\t\tkernel-headers-2.4.27-3-586tsc - 2.4.27-10sarge2\n\t\tpcmcia-modules-2.4.27-3-k7 - 3.2.5+2sarge1\n\t\tkernel-image-2.4.27-3-386 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-k7-smp - 2.4.27-10sarge2\n\t\tkernel-pcmcia-modules-2.4-386 - 101sarge1\n\t\tlm-sensors-2.4.27-3-586tsc - 2.9.1-1sarge3\n\t\tkernel-pcmcia-modules-2.4.27-3-386 - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-686-smp - 2.9.1-1sarge3\n\t\tkernel-image-2.4-586tsc - 101sarge1\n\t\tpcmcia-modules-2.4.27-3-686-smp - 3.2.5+2sarge1\n\t\tpcmcia-modules-2.4.27-3-386 - 3.2.5+2sarge1\n\t\tpcmcia-modules-2.4.27-3-586tsc - 3.2.5+2sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-k7 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-386 - 101sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-686 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-386 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-686 - 101sarge1\n\t\tkernel-image-2.4.27-3-586tsc - 2.4.27-10sarge2\n\t\tmindi-kernel - 2.4.27-2sarge1\n\t\ti2c-2.4.27-3-386 - 2.9.1-1sarge1\n\t\tlm-sensors-2.4.27-3-386 - 2.9.1-1sarge3\n\t\tkernel-pcmcia-modules-2.4.27-3-k7-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-k7-smp - 101sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-586tsc - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-k7-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4-k7 - 101sarge1\n\t\tpcmcia-modules-2.4.27-3-686 - 3.2.5+2sarge1\n\t\ti2c-2.4.27-3-k6 - 2.9.1-1sarge1\n\t\tkernel-headers-2.4-586tsc - 101sarge1\n\t\tkernel-pcmcia-modules-2.4-k7-smp - 101sarge1\n\t\tkernel-headers-2.4.27-3-686 - 2.4.27-10sarge2\n\t\tkernel-pcmcia-modules-2.4-586tsc - 101sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-k6 - 2.4.27-10sarge2\n\t\tkernel-pcmcia-modules-2.4-686 - 101sarge1\n\t\tkernel-image-2.4-386 - 101sarge1\n\t\tkernel-image-2.4-686 - 101sarge1\n\t\tkernel-image-2.4-686-smp - 101sarge1\n\t\tkernel-image-2.4-k7-smp - 101sarge1\n\t\tkernel-pcmcia-modules-2.4-686-smp - 101sarge1\n\t\tlibsensors-dev - 2.9.1-1sarge3\n\t\tkernel-image-2.4.27-3-k6 - 2.4.27-10sarge2\n\t\ti2c-2.4.27-3-k7-smp - 2.9.1-1sarge1\n\t\tkernel-pcmcia-modules-2.4-k6 - 101sarge1\n\t\tkernel-pcmcia-modules-2.4-k7 - 101sarge1\n\t\ti2c-2.4.27-3-586tsc - 2.9.1-1sarge1\n\t\tkernel-image-2.4.27-3-686-smp - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-686 - 2.9.1-1sarge3\n\t\tsensord - 2.9.1-1sarge3\n\t\tpcmcia-modules-2.4.27-3-k6 - 3.2.5+2sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-686-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-speakup - 2.4.27-1.1sarge1\n\t\tkernel-headers-2.4.27-3-686-smp - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-k7 - 2.9.1-1sarge3\n\t\tkernel-headers-2.4.27-3-k6 - 2.4.27-10sarge2\n\t\tlm-sensors - 2.9.1-1sarge3\n\t\tkernel-headers-2.4-k6 - 101sarge1\n\t\ti2c-2.4.27-3-686 - 2.9.1-1sarge1\n\t\ti2c-2.4.27-3-686-smp - 2.9.1-1sarge1\n\t\tkernel-build-2.4.27-3 - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-k7-smp - 2.9.1-1sarge3\n\t\ti2c-2.4.27-3-k7 - 2.9.1-1sarge1\n\t\tkernel-image-2.4.27-3-k7 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-k7 - 101sarge1\n\t\tpcmcia-modules-2.4.27-3-k7-smp - 3.2.5+2sarge1\n\t\tkernel-headers-2.4.27-3-k7 - 2.4.27-10sarge2\n\t\tlibsensors3 - 2.9.1-1sarge3\n\tsparc:\n\t\tkernel-image-2.4-sparc32 - 42sarge1\n\t\tkernel-image-2.4.27-3-sparc32-smp - 2.4.27-9sarge2\n\t\tkernel-image-2.4-sparc64-smp - 42sarge1\n\t\tkernel-image-2.4.27-3-sparc32 - 2.4.27-9sarge2\n\t\tkernel-headers-2.4.27-3-sparc64-smp - 2.4.27-9sarge2\n\t\tkernel-headers-2.4.27-3-sparc32 - 2.4.27-9sarge2\n\t\tkernel-headers-2.4.27-3-sparc64 - 2.4.27-9sarge2\n\t\tkernel-build-2.4.27-3 - 2.4.27-9sarge2\n\t\tkernel-image-2.4-sparc32-smp - 42sarge1\n\t\tkernel-headers-2.4-sparc32-smp - 42sarge1\n\t\tkernel-image-2.4.27-3-sparc64 - 2.4.27-9sarge2\n\t\tkernel-image-2.4.27-3-sparc64-smp - 2.4.27-9sarge2\n\t\tkernel-image-2.4-sparc64 - 42sarge1\n\t\tkernel-headers-2.4-sparc64 - 42sarge1\n\t\tkernel-headers-2.4.27-3-sparc32-smp - 2.4.27-9sarge2\n\t\tkernel-headers-2.4-sparc32 - 42sarge1\n\t\tkernel-headers-2.4-sparc64-smp - 42sarge1\n\t\tkernel-headers-2.4.27-3 - 2.4.27-9sarge2\n\talpha:\n\t\tkernel-headers-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-image-2.4-smp - 101sarge1\n\t\tkernel-image-2.4-generic - 101sarge1\n\t\tkernel-image-2.4.27-3-generic - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-generic - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-generic - 101sarge1\n\t\tkernel-build-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-smp - 101sarge1\n\tia64:\n\t\tkernel-image-2.4.27-3-mckinley-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-itanium-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4-mckinley - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-itanium-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-mckinley-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4-itanium - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-itanium - 2.4.27-10sarge2\n\t\tkernel-image-2.4-mckinley-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-image-2.4-itanium-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-mckinley - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-mckinley - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-itanium - 2.4.27-10sarge2\n\tmips:\n\t\tkernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1\n\t\tmips-tools - 2.4.27-10.sarge2.040815-1\n\tnoarch:\n\t\tkernel-patch-debian-2.4.27 - 2.4.27-10sarge2\n\t\tlm-sensors-source - 2.9.1-1sarge3\n\t\tkernel-doc-2.4.27-speakup - 2.4.27-1.1sarge1\n\t\tsystemimager-boot-ia64-standard - 3.2.3-6sarge1\n\t\tsystemimager-boot-i386-standard - 3.2.3-6sarge1\n\t\ti2c-source - 2.9.1-1sarge1\n\t\tkernel-doc-2.4.27 - 2.4.27-10sarge2\n\t\tkernel-tree-2.4.27 - 2.4.27-10sarge2\n\t\tsystemimager-common - 3.2.3-6sarge1\n\t\tsystemimager-doc - 3.2.3-6sarge1\n\t\tkernel-patch-2.4-i2c - 2.9.1-1sarge1\n\t\tsystemimager-server - 3.2.3-6sarge1\n\t\tkernel-source-2.4.27 - 2.4.27-10sarge2\n\t\tsystemimager-client - 3.2.3-6sarge1\n\t\tsystemimager-server-flamethrowerd - 3.2.3-6sarge1\n\t\tkernel-patch-2.4-lm-sensors - 2.9.1-1sarge3\n\tmipsel:\n\t\tkernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge2.040815-1\n\t\tmips-tools - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1\n\tarm:\n\t\tkernel-headers-2.4.27 - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-riscpc - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-riscstation - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-netwinder - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-lart - 2.4.27-2sarge2\n\t\tkernel-build-2.4.27 - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-bast - 2.4.27-2sarg",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "31.12.2004",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03166",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2004-0887, CVE-2004-1058, CVE-2004-2607, CVE-2005-0449, CVE-2005-1761, CVE-2005-2457, CVE-2005-2555, CVE-2005-2709, CVE-2005-2973, CVE-2005-3257, CVE-2005-3783, CVE-2005-3806, CVE-2005-3848, CVE-2005-3857, CVE-2005-3858, CVE-2005-4618, DSA-1018, ID:1401638",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 i2c-2.4.27-3-386 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1018/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1058\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2607\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0449\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3858\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2555\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2457\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3848\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3257\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3857\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4618\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3783\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3806\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2973\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0887\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1761",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2004-0887 (GCVE-0-2004-0887)

Vulnerability from cvelistv5 – Published: 2004-10-26 04:00 – Updated: 2024-08-08 00:31

Summary

SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

5 references

URL	Tags
http://www.securityfocus.com/bid/11489	vdb-entryx_refsource_BID
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE

Date Public

2004-10-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:31:47.930Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "11489",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11489"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "linux-instruction-gain-privileges(17801)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17801"
          },
          {
            "name": "SUSE-SA:2004:037",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2004_37_kernel.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-10-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "11489",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11489"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "linux-instruction-gain-privileges(17801)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17801"
        },
        {
          "name": "SUSE-SA:2004:037",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2004_37_kernel.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0887",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "11489",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11489"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "linux-instruction-gain-privileges(17801)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17801"
            },
            {
              "name": "SUSE-SA:2004:037",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2004_37_kernel.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-0887",
    "datePublished": "2004-10-26T04:00:00.000Z",
    "dateReserved": "2004-09-22T00:00:00.000Z",
    "dateUpdated": "2024-08-08T00:31:47.930Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2004-1058 (GCVE-0-2004-1058)

Vulnerability from cvelistv5 – Published: 2004-12-22 05:00 – Updated: 2024-08-08 00:39

Summary

Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

19 references

URL	Tags
http://secunia.com/advisories/18684	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19038	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21476	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/11937	vdb-entryx_refsource_BID
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/11052	vdb-entryx_refsource_BID
http://www.gentoo.org/security/en/glsa/glsa-20040…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/19607	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://lists.suse.de/archive/suse-security-announ…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/38-1/	vendor-advisoryx_refsource_UBUNTU
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	vendor-advisoryx_refsource_FEDORA
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://www.redhat.com/support/errata/RHSA-2005-293.html	vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT

Date Public

2004-12-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:39:00.873Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "18684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18684"
          },
          {
            "name": "19038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19038"
          },
          {
            "name": "MDKSA-2005:022",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022"
          },
          {
            "name": "linux-spawning-race-condition(17151)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17151"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "21476",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21476"
          },
          {
            "name": "11937",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11937"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "11052",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11052"
          },
          {
            "name": "GLSA-200408-24",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml"
          },
          {
            "name": "19607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19607"
          },
          {
            "name": "RHSA-2006:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10427",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10427"
          },
          {
            "name": "SUSE-SA:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
          },
          {
            "name": "USN-38-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/38-1/"
          },
          {
            "name": "FLSA:152532",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532"
          },
          {
            "name": "20060402-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
          },
          {
            "name": "RHSA-2005:293",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-293.html"
          },
          {
            "name": "RHSA-2006:0191",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-12-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "18684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18684"
        },
        {
          "name": "19038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19038"
        },
        {
          "name": "MDKSA-2005:022",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022"
        },
        {
          "name": "linux-spawning-race-condition(17151)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17151"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "21476",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21476"
        },
        {
          "name": "11937",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11937"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "11052",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11052"
        },
        {
          "name": "GLSA-200408-24",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml"
        },
        {
          "name": "19607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19607"
        },
        {
          "name": "RHSA-2006:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10427",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10427"
        },
        {
          "name": "SUSE-SA:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
        },
        {
          "name": "USN-38-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/38-1/"
        },
        {
          "name": "FLSA:152532",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532"
        },
        {
          "name": "20060402-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
        },
        {
          "name": "RHSA-2005:293",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-293.html"
        },
        {
          "name": "RHSA-2006:0191",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-1058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "18684",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18684"
            },
            {
              "name": "19038",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19038"
            },
            {
              "name": "MDKSA-2005:022",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:022"
            },
            {
              "name": "linux-spawning-race-condition(17151)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17151"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "21476",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21476"
            },
            {
              "name": "11937",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11937"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "11052",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11052"
            },
            {
              "name": "GLSA-200408-24",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml"
            },
            {
              "name": "19607",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19607"
            },
            {
              "name": "RHSA-2006:0190",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10427",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10427"
            },
            {
              "name": "SUSE-SA:2006:012",
              "refsource": "SUSE",
              "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
            },
            {
              "name": "USN-38-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/38-1/"
            },
            {
              "name": "FLSA:152532",
              "refsource": "FEDORA",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532"
            },
            {
              "name": "20060402-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
            },
            {
              "name": "RHSA-2005:293",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-293.html"
            },
            {
              "name": "RHSA-2006:0191",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-1058",
    "datePublished": "2004-12-22T05:00:00.000Z",
    "dateReserved": "2004-11-23T00:00:00.000Z",
    "dateUpdated": "2024-08-08T00:39:00.873Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2004-2607 (GCVE-0-2004-2607)

Vulnerability from cvelistv5 – Published: 2005-12-03 00:00 – Updated: 2024-08-08 01:36

Summary

A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

8 references

URL	Tags
http://secunia.com/advisories/18977	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://wwwnew.mandriva.com/security/advisories?na…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/16759	vdb-entryx_refsource_BID
http://www.uwsg.iu.edu/hypermail/linux/kernel/040…	mailing-listx_refsource_MLIST
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.uwsg.iu.edu/hypermail/linux/kernel/040…	mailing-listx_refsource_MLIST

Date Public

2004-04-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:36:24.335Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "18977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18977"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "MDKSA-2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
          },
          {
            "name": "16759",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16759"
          },
          {
            "name": "[linux-kernel] 20040416 Re: [CHECKER] Probable security holes in 2.6.5",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "[linux-kernel] 20040416 Re: [CHECKER] Probable security holes in 2.6.5",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0743.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-04-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-02-25T10:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "18977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18977"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "MDKSA-2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
        },
        {
          "name": "16759",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16759"
        },
        {
          "name": "[linux-kernel] 20040416 Re: [CHECKER] Probable security holes in 2.6.5",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "[linux-kernel] 20040416 Re: [CHECKER] Probable security holes in 2.6.5",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0743.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-2607",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "18977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18977"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "MDKSA-2006:044",
              "refsource": "MANDRIVA",
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
            },
            {
              "name": "16759",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16759"
            },
            {
              "name": "[linux-kernel] 20040416 Re: [CHECKER] Probable security holes in 2.6.5",
              "refsource": "MLIST",
              "url": "http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "[linux-kernel] 20040416 Re: [CHECKER] Probable security holes in 2.6.5",
              "refsource": "MLIST",
              "url": "http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0743.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-2607",
    "datePublished": "2005-12-03T00:00:00.000Z",
    "dateReserved": "2005-12-02T00:00:00.000Z",
    "dateUpdated": "2024-08-08T01:36:24.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-0449 (GCVE-0-2005-0449)

Vulnerability from cvelistv5 – Published: 2005-02-16 05:00 – Updated: 2024-08-07 21:13

Summary

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

18 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2005-366.html	vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2005-283.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19607	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/82-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/12598	vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	vendor-advisoryx_refsource_FEDORA
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://oss.sgi.com/archives/netdev/2005-01/msg010…	mailing-listx_refsource_MLIST
http://www.redhat.com/support/errata/RHSA-2005-293.html	vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2005-284.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://distro.conectiva.com.br/atualizacoes/?id=a…	vendor-advisoryx_refsource_CONECTIVA

Date Public

2005-02-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:13:54.126Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:10753",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753"
          },
          {
            "name": "RHSA-2005:366",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-366.html"
          },
          {
            "name": "RHSA-2005:283",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-283.html"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "SUSE-SA:2005:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_18_kernel.html"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "19607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19607"
          },
          {
            "name": "USN-82-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/82-1/"
          },
          {
            "name": "12598",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/12598"
          },
          {
            "name": "MDKSA-2005:218",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
          },
          {
            "name": "FLSA:152532",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532"
          },
          {
            "name": "20060402-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
          },
          {
            "name": "[netdev] 20050124 Re: skb_checksum_help",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://oss.sgi.com/archives/netdev/2005-01/msg01036.html"
          },
          {
            "name": "RHSA-2005:293",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-293.html"
          },
          {
            "name": "RHSA-2005:284",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-284.html"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "CLA-2005:945",
            "tags": [
              "vendor-advisory",
              "x_refsource_CONECTIVA",
              "x_transferred"
            ],
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000945"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-02-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:10753",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753"
        },
        {
          "name": "RHSA-2005:366",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-366.html"
        },
        {
          "name": "RHSA-2005:283",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-283.html"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "SUSE-SA:2005:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_18_kernel.html"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "19607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19607"
        },
        {
          "name": "USN-82-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/82-1/"
        },
        {
          "name": "12598",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/12598"
        },
        {
          "name": "MDKSA-2005:218",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
        },
        {
          "name": "FLSA:152532",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532"
        },
        {
          "name": "20060402-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
        },
        {
          "name": "[netdev] 20050124 Re: skb_checksum_help",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://oss.sgi.com/archives/netdev/2005-01/msg01036.html"
        },
        {
          "name": "RHSA-2005:293",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-293.html"
        },
        {
          "name": "RHSA-2005:284",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-284.html"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "CLA-2005:945",
          "tags": [
            "vendor-advisory",
            "x_refsource_CONECTIVA"
          ],
          "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000945"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-0449",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:10753",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753"
            },
            {
              "name": "RHSA-2005:366",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-366.html"
            },
            {
              "name": "RHSA-2005:283",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-283.html"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "SUSE-SA:2005:018",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_18_kernel.html"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "19607",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19607"
            },
            {
              "name": "USN-82-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/82-1/"
            },
            {
              "name": "12598",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/12598"
            },
            {
              "name": "MDKSA-2005:218",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
            },
            {
              "name": "FLSA:152532",
              "refsource": "FEDORA",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532"
            },
            {
              "name": "20060402-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
            },
            {
              "name": "[netdev] 20050124 Re: skb_checksum_help",
              "refsource": "MLIST",
              "url": "http://oss.sgi.com/archives/netdev/2005-01/msg01036.html"
            },
            {
              "name": "RHSA-2005:293",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-293.html"
            },
            {
              "name": "RHSA-2005:284",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-284.html"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "CLA-2005:945",
              "refsource": "CONECTIVA",
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000945"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-0449",
    "datePublished": "2005-02-16T05:00:00.000Z",
    "dateReserved": "2005-02-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T21:13:54.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-1761 (GCVE-0-2005-1761)

Vulnerability from cvelistv5 – Published: 2005-08-05 04:00 – Updated: 2024-08-07 21:59

Summary

Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1076 records in the last 180 days details

References

17 references

URL	Tags
http://secunia.com/advisories/18056	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/14051	vdb-entryx_refsource_BID
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://secunia.com/advisories/17073	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://kernel.org/git/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2005/dsa-922	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2005-551.html	vendor-advisoryx_refsource_REDHAT
http://securitytracker.com/id?1014275	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2005-514.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17002	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/427980/100…	vendor-advisoryx_refsource_FEDORA
http://www.redhat.com/support/errata/RHSA-2005-663.html	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2005/1878	vdb-entryx_refsource_VUPEN

Date Public

2005-08-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:59:24.223Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "18056",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18056"
          },
          {
            "name": "14051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/14051"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1"
          },
          {
            "name": "17073",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17073"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "oval:org.mitre.oval:def:10487",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10487"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea78729b8dbfc400fe165a57b90a394a7275a54"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "DSA-922",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2005/dsa-922"
          },
          {
            "name": "RHSA-2005:551",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-551.html"
          },
          {
            "name": "1014275",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1014275"
          },
          {
            "name": "RHSA-2005:514",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-514.html"
          },
          {
            "name": "17002",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17002"
          },
          {
            "name": "SUSE-SA:2005:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_44_kernel.html"
          },
          {
            "name": "FLSA:157459-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
          },
          {
            "name": "RHSA-2005:663",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-663.html"
          },
          {
            "name": "ADV-2005-1878",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/1878"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "18056",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18056"
        },
        {
          "name": "14051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/14051"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.1"
        },
        {
          "name": "17073",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17073"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "oval:org.mitre.oval:def:10487",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10487"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea78729b8dbfc400fe165a57b90a394a7275a54"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "DSA-922",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2005/dsa-922"
        },
        {
          "name": "RHSA-2005:551",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-551.html"
        },
        {
          "name": "1014275",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1014275"
        },
        {
          "name": "RHSA-2005:514",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-514.html"
        },
        {
          "name": "17002",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17002"
        },
        {
          "name": "SUSE-SA:2005:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_44_kernel.html"
        },
        {
          "name": "FLSA:157459-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
        },
        {
          "name": "RHSA-2005:663",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-663.html"
        },
        {
          "name": "ADV-2005-1878",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/1878"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2005-1761",
    "datePublished": "2005-08-05T04:00:00.000Z",
    "dateReserved": "2005-05-31T00:00:00.000Z",
    "dateUpdated": "2024-08-07T21:59:24.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-2457 (GCVE-0-2005-2457)

Vulnerability from cvelistv5 – Published: 2005-08-22 04:00 – Updated: 2024-08-07 22:30

Summary

The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

16 references

URL	Tags
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/169-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/16500	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/14614	vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/419522/100…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://secunia.com/advisories/17826	third-party-advisoryx_refsource_SECUNIA
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog…	x_refsource_CONFIRM
http://secunia.com/advisories/17918	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://secunia.com/advisories/16355/	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-08-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T22:30:01.609Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2005:050",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html"
          },
          {
            "name": "USN-169-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/169-1/"
          },
          {
            "name": "16500",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/16500"
          },
          {
            "name": "MDKSA-2005:220",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "14614",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/14614"
          },
          {
            "name": "SUSE-SA:2005:068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
          },
          {
            "name": "MDKSA-2005:218",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
          },
          {
            "name": "17826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17826"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5"
          },
          {
            "name": "17918",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17918"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "MDKSA-2005:219",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
          },
          {
            "name": "16355",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/16355/"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SA:2005:050",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html"
        },
        {
          "name": "USN-169-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/169-1/"
        },
        {
          "name": "16500",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/16500"
        },
        {
          "name": "MDKSA-2005:220",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "14614",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/14614"
        },
        {
          "name": "SUSE-SA:2005:068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
        },
        {
          "name": "MDKSA-2005:218",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
        },
        {
          "name": "17826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17826"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5"
        },
        {
          "name": "17918",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17918"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "MDKSA-2005:219",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
        },
        {
          "name": "16355",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/16355/"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-2457",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SA:2005:050",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html"
            },
            {
              "name": "USN-169-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/169-1/"
            },
            {
              "name": "16500",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/16500"
            },
            {
              "name": "MDKSA-2005:220",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "14614",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/14614"
            },
            {
              "name": "SUSE-SA:2005:068",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
            },
            {
              "name": "MDKSA-2005:218",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
            },
            {
              "name": "17826",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17826"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5"
            },
            {
              "name": "17918",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17918"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "MDKSA-2005:219",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
            },
            {
              "name": "16355",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/16355/"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-2457",
    "datePublished": "2005-08-22T04:00:00.000Z",
    "dateReserved": "2005-08-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T22:30:01.609Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-2555 (GCVE-0-2005-2555)

Vulnerability from cvelistv5 – Published: 2005-08-16 04:00 – Updated: 2024-08-07 22:30

Summary

Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

19 references

URL	Tags
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
https://usn.ubuntu.com/169-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/17073	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/14609	vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://www.redhat.com/support/errata/RHSA-2005-514.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17002	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17826	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/427980/100…	vendor-advisoryx_refsource_FEDORA
http://www.redhat.com/support/errata/RHSA-2005-663.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://www.vupen.com/english/advisories/2005/1878	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-08-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T22:30:01.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2005:050",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10444",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10444"
          },
          {
            "name": "USN-169-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/169-1/"
          },
          {
            "name": "17073",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17073"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "14609",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/14609"
          },
          {
            "name": "MDKSA-2005:218",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
          },
          {
            "name": "RHSA-2005:514",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-514.html"
          },
          {
            "name": "17002",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17002"
          },
          {
            "name": "17826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17826"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2"
          },
          {
            "name": "FLSA:157459-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
          },
          {
            "name": "RHSA-2005:663",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-663.html"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "MDKSA-2005:219",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
          },
          {
            "name": "ADV-2005-1878",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/1878"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SA:2005:050",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10444",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10444"
        },
        {
          "name": "USN-169-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/169-1/"
        },
        {
          "name": "17073",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17073"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "14609",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/14609"
        },
        {
          "name": "MDKSA-2005:218",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
        },
        {
          "name": "RHSA-2005:514",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-514.html"
        },
        {
          "name": "17002",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17002"
        },
        {
          "name": "17826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17826"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fc0b4a7a73a81e74d0004732df358f4f9975be2"
        },
        {
          "name": "FLSA:157459-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
        },
        {
          "name": "RHSA-2005:663",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-663.html"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "MDKSA-2005:219",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
        },
        {
          "name": "ADV-2005-1878",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/1878"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-2555",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SA:2005:050",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_50_kernel.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10444",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10444"
            },
            {
              "name": "USN-169-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/169-1/"
            },
            {
              "name": "17073",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17073"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "14609",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/14609"
            },
            {
              "name": "MDKSA-2005:218",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
            },
            {
              "name": "RHSA-2005:514",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-514.html"
            },
            {
              "name": "17002",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17002"
            },
            {
              "name": "17826",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17826"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2"
            },
            {
              "name": "FLSA:157459-3",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
            },
            {
              "name": "RHSA-2005:663",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-663.html"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "MDKSA-2005:219",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
            },
            {
              "name": "ADV-2005-1878",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/1878"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-2555",
    "datePublished": "2005-08-16T04:00:00.000Z",
    "dateReserved": "2005-08-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T22:30:01.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-2709 (GCVE-0-2005-2709)

Vulnerability from cvelistv5 – Published: 2005-11-20 22:00 – Updated: 2024-08-07 22:45

Summary

The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1076 records in the last 180 days details

References

27 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/18684	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2005/2359	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/17541	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/archive/1/428058/100…	vendor-advisoryx_refsource_FEDORA
http://securitytracker.com/id?1015434	vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/20676	vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/427981/100…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/219-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/17648	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/428028/100…	vendor-advisoryx_refsource_FEDORA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/427980/100…	vendor-advisoryx_refsource_FEDORA
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/17504	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/15365	vdb-entryx_refsource_BID

Date Public

2005-11-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T22:45:01.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "name": "18684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18684"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "ADV-2005-2359",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2359"
          },
          {
            "name": "17541",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17541"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "FLSA:157459-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
          },
          {
            "name": "1015434",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015434"
          },
          {
            "name": "20676",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/20676"
          },
          {
            "name": "FLSA:157459-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
          },
          {
            "name": "USN-219-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/219-1/"
          },
          {
            "name": "17648",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17648"
          },
          {
            "name": "RHSA-2006:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "FLSA:157459-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
          },
          {
            "name": "kernel-sysctl-interface-dos(23040)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23040"
          },
          {
            "name": "FLSA:157459-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "oval:org.mitre.oval:def:10746",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10746"
          },
          {
            "name": "17504",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17504"
          },
          {
            "name": "MDKSA-2006:059",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "RHSA-2006:0191",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          },
          {
            "name": "15365",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15365"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "name": "18684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18684"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "ADV-2005-2359",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2359"
        },
        {
          "name": "17541",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17541"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "FLSA:157459-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
        },
        {
          "name": "1015434",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015434"
        },
        {
          "name": "20676",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/20676"
        },
        {
          "name": "FLSA:157459-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
        },
        {
          "name": "USN-219-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/219-1/"
        },
        {
          "name": "17648",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17648"
        },
        {
          "name": "RHSA-2006:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "FLSA:157459-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
        },
        {
          "name": "kernel-sysctl-interface-dos(23040)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23040"
        },
        {
          "name": "FLSA:157459-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "oval:org.mitre.oval:def:10746",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10746"
        },
        {
          "name": "17504",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17504"
        },
        {
          "name": "MDKSA-2006:059",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:059"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "RHSA-2006:0191",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        },
        {
          "name": "15365",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15365"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2005-2709",
    "datePublished": "2005-11-20T22:00:00.000Z",
    "dateReserved": "2005-08-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T22:45:01.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-2973 (GCVE-0-2005-2973)

Vulnerability from cvelistv5 – Published: 2005-10-27 04:00 – Updated: 2024-08-07 22:53

Summary

The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash).

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1076 records in the last 180 days details

References

34 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2006-04…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17917	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18684	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17261	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/advisories/9806	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21745	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19185	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/419522/100…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/428058/100…	vendor-advisoryx_refsource_FEDORA
http://www.vupen.com/english/advisories/2005/2173	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/advisories/9555	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/219-1/	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/15156	vdb-entryx_refsource_BID
http://www.osvdb.org/20163	vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/428028/100…	vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/17280	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/advisories/9549	vendor-advisoryx_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/17918	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/427980/100…	vendor-advisoryx_refsource_FEDORA
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/20237	third-party-advisoryx_refsource_SECUNIA
http://linux.bkbits.net:8080/linux-2.6/cset%40434…	x_refsource_CONFIRM
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-10-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T22:53:29.683Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm"
          },
          {
            "name": "RHSA-2006:0493",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0493.html"
          },
          {
            "name": "17917",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17917"
          },
          {
            "name": "18684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18684"
          },
          {
            "name": "17261",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17261"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170772"
          },
          {
            "name": "oval:org.mitre.oval:def:10041",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10041"
          },
          {
            "name": "SUSE-SA:2005:067",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/advisories/9806"
          },
          {
            "name": "MDKSA-2006:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "21745",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21745"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "19185",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19185"
          },
          {
            "name": "SUSE-SA:2005:068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
          },
          {
            "name": "FLSA:157459-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
          },
          {
            "name": "ADV-2005-2173",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2173"
          },
          {
            "name": "FEDORA-2005-1013",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/advisories/9555"
          },
          {
            "name": "USN-219-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/219-1/"
          },
          {
            "name": "RHSA-2006:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
          },
          {
            "name": "15156",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15156"
          },
          {
            "name": "20163",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/20163"
          },
          {
            "name": "FLSA:157459-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
          },
          {
            "name": "17280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17280"
          },
          {
            "name": "FEDORA-2005-1007",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/advisories/9549"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "17918",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17918"
          },
          {
            "name": "FLSA:157459-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "20237",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20237"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.bkbits.net:8080/linux-2.6/cset%404342df67SNhRx_3FGhUrrU-FXLlQIA"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "RHSA-2006:0191",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a denial of service (infinite loop and crash)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm"
        },
        {
          "name": "RHSA-2006:0493",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0493.html"
        },
        {
          "name": "17917",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17917"
        },
        {
          "name": "18684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18684"
        },
        {
          "name": "17261",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17261"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=170772"
        },
        {
          "name": "oval:org.mitre.oval:def:10041",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10041"
        },
        {
          "name": "SUSE-SA:2005:067",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/advisories/9806"
        },
        {
          "name": "MDKSA-2006:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "21745",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21745"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "19185",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19185"
        },
        {
          "name": "SUSE-SA:2005:068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
        },
        {
          "name": "FLSA:157459-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
        },
        {
          "name": "ADV-2005-2173",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2173"
        },
        {
          "name": "FEDORA-2005-1013",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/advisories/9555"
        },
        {
          "name": "USN-219-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/219-1/"
        },
        {
          "name": "RHSA-2006:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
        },
        {
          "name": "15156",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15156"
        },
        {
          "name": "20163",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/20163"
        },
        {
          "name": "FLSA:157459-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
        },
        {
          "name": "17280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17280"
        },
        {
          "name": "FEDORA-2005-1007",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/advisories/9549"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "17918",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17918"
        },
        {
          "name": "FLSA:157459-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "20237",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20237"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.bkbits.net:8080/linux-2.6/cset%404342df67SNhRx_3FGhUrrU-FXLlQIA"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "RHSA-2006:0191",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2005-2973",
    "datePublished": "2005-10-27T04:00:00.000Z",
    "dateReserved": "2005-09-19T00:00:00.000Z",
    "dateUpdated": "2024-08-07T22:53:29.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3257 (GCVE-0-2005-3257)

Vulnerability from cvelistv5 – Published: 2005-10-18 04:00 – Updated: 2024-08-07 23:01

Summary

The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2319 records in the last 180 days details

References

18 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17226	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113	x_refsource_CONFIRM
http://secunia.com/advisories/19185	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/15122	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHBA-2007-0304.html	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://secunia.com/advisories/17826	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/17995	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-10-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:01:59.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDKSA-2005:235",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235"
          },
          {
            "name": "oval:org.mitre.oval:def:10615",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615"
          },
          {
            "name": "MDKSA-2005:220",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "17226",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17226"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113"
          },
          {
            "name": "19185",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19185"
          },
          {
            "name": "15122",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15122"
          },
          {
            "name": "RHBA-2007-0304",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
          },
          {
            "name": "MDKSA-2005:218",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
          },
          {
            "name": "17826",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17826"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "MDKSA-2005:219",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "17995",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17995"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "MDKSA-2005:235",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235"
        },
        {
          "name": "oval:org.mitre.oval:def:10615",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615"
        },
        {
          "name": "MDKSA-2005:220",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "17226",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17226"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113"
        },
        {
          "name": "19185",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19185"
        },
        {
          "name": "15122",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15122"
        },
        {
          "name": "RHBA-2007-0304",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
        },
        {
          "name": "MDKSA-2005:218",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
        },
        {
          "name": "17826",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17826"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "MDKSA-2005:219",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "17995",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17995"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3257",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDKSA-2005:235",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:235"
            },
            {
              "name": "oval:org.mitre.oval:def:10615",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10615"
            },
            {
              "name": "MDKSA-2005:220",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:220"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "17226",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17226"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334113"
            },
            {
              "name": "19185",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19185"
            },
            {
              "name": "15122",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15122"
            },
            {
              "name": "RHBA-2007-0304",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
            },
            {
              "name": "MDKSA-2005:218",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:218"
            },
            {
              "name": "17826",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17826"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "MDKSA-2005:219",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:219"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "17995",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17995"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3257",
    "datePublished": "2005-10-18T04:00:00.000Z",
    "dateReserved": "2005-10-18T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:01:59.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-03166 (CVE-2004-0887)

CVE-2004-0887 (GCVE-0-2004-0887)

CVE-2004-1058 (GCVE-0-2004-1058)

CVE-2004-2607 (GCVE-0-2004-2607)

CVE-2005-0449 (GCVE-0-2005-0449)

CVE-2005-1761 (GCVE-0-2005-1761)

CVE-2005-2457 (GCVE-0-2005-2457)

CVE-2005-2555 (GCVE-0-2005-2555)

CVE-2005-2709 (GCVE-0-2005-2709)

CVE-2005-2973 (GCVE-0-2005-2973)

CVE-2005-3257 (GCVE-0-2005-3257)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour