PT-2004-1096 · Gentoo Linux+1 · Aa-Sources+2

Publicado 2004-04-17 · Atualizado 2017-07-11 · CVE-2004-0133

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux versions 2.4.x aa-sources versions prior to 2.4.23-r2

Description The issue concerns an information leak in the XFS file system code in Linux, allowing local users to obtain sensitive information by reading the raw device. Additionally, there are multiple vulnerabilities in the aa-sources package of Gentoo Linux, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.

Recommendations For Linux version 2.4.x, update to a version that fixes the information leak in the XFS file system code. For aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later to address the multiple vulnerabilities.

Correção

Identificadores relacionados

BDU:2015-09455

CVE-2004-0133

Produtos afetados

Linux

Xfs

Aa-Sources

Referências · 10

• http://security.gentoo.org/glsa/glsa-200407-02.xml · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09455 · Nota de Segurança
• ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15901 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2004:029 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0133 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108213675028441&w=2 · Aviso do Fabricante
• http://securityfocus.com/bid/10151 · Nota
• http://secunia.com/advisories/11362 · Nota
• http://linuxsecurity.com/advisories/engarde_advisory-4285.html · Aviso do Fabricante