PT-2004-1097 · Gentoo Linux+3 · Aa-Sources+3

Publicado

2004-04-17

·

Atualizado

2017-10-11

·

CVE-2004-0181

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux versions 2.4.x aa-sources versions prior to 2.4.23-r2
Description The issue concerns an information leak in the JFS file system code in Linux, allowing local users to obtain sensitive information by reading the raw device. Additionally, there are multiple vulnerabilities in the aa-sources package of Gentoo Linux, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.
Recommendations For Linux versions 2.4.x, consider updating to a version that does not contain the JFS file system code vulnerability. For aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later to resolve the vulnerabilities.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-09455
CVE-2004-0181
RHSA-2005:663
RHSA-2005_663

Produtos afetados

Jfs
Linux
Red Hat
Aa-Sources