PT-2004-1711 · Broadcom · Linux

Infamous41Md · Publicado 2004-06-30 · Atualizado 2017-10-11 · CVE-2004-0619

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Broadcom 5820 cryptonet driver (affected versions not specified)

Description The issue is related to an integer overflow in the ubsec keysetup function, which can be exploited by local users to cause a denial of service (crash) and potentially execute arbitrary code. This is achieved by manipulating the add dsa buf bytes variable to a negative value, resulting in a buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0619

RHSA-2004:549

Produtos afetados

Linux

Referências · 9

• http://redhat.com/support/errata/RHSA-2005-283.html · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/p-047.shtml · Nota
• http://secunia.com/advisories/11936 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16459 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0619 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773 · Nota
• http://redhat.com/support/errata/RHSA-2004-549.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=108802653409053&w=2 · Nota
• http://securityfocus.com/bid/10599 · Aviso do Fabricante