PT-2004-3031 · Linux · Linux Kernel

Markku-Juhani O. Saarinen · Publicado 2004-05-26 · Atualizado 2016-10-18 · CVE-2004-2135

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.x

Description The issue concerns a weakness in the cryptoloop on Linux kernel, specifically with "IV computation" when used on certain file systems with a block size of 1024 or greater. This weakness allows watermarked files to be detected without decryption.

Recommendations For Linux kernel version 2.6.x, consider applying configuration changes to mitigate the risk, such as avoiding the use of cryptoloop on file systems with a block size of 1024 or greater until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-2135

Produtos afetados

Linux Kernel

Referências · 6

• 🔥 http://securiteam.com/exploits/5UP0P1PFPM.html · Exploit
• 🔥 http://securityfocus.com/bid/13775 · Exploit
• 🔥 https://exploit-db.com/exploits/25707 · Exploit
• http://marc.info/?l=linux-kernel&m=107719798631935&w=2 · Nota
• http://mareichelt.de/pub/notmine/diskenc.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2135 · Nota de Segurança