PT-2004-1877 · Linux+1 · Linux+1

Vitaly V. Bursov

·

Publicado

2004-10-28

·

Atualizado

2017-10-11

·

CVE-2004-0814

CVSS v2.0

1.2

Baixa

VetorAV:L/AC:H/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux versions 2.4.x through 2.6.8
Description The issue concerns multiple race conditions in the terminal layer, allowing local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface being accessed by another thread. Additionally, remote attackers can cause a denial of service by switching from console to PPP line discipline and then quickly sending data during the switch.
Recommendations For Linux versions 2.4.x through 2.6.8, update to version 2.6.9 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-0814
RHSA-2005:293
RHSA-2005_293

Produtos afetados

Linux
Red Hat