PT-2005-1268 · Linux+1 · Linux+1

Publicado 2005-02-06 · Atualizado 2017-10-11 · CVE-2005-0180

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux versions 2.6.x

Description The issue concerns multiple integer signedness errors in the sg scsi ioctl function. This allows local users to bypass a maximum length check, potentially enabling them to read or modify kernel memory by providing negative integers as arguments to the scsi ioctl. The errors occur before the copy from user and copy to user functions are called.

Recommendations For Linux version 2.6.x, consider restricting access to the sg scsi ioctl function until a patch is available. As a temporary workaround, avoid using negative integers in arguments to the scsi ioctl to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0180

RHSA-2005:092

RHSA-2005_092

Produtos afetados

Linux

Red Hat

Referências · 33

• 🔥 http://redhat.com/support/errata/RHSA-2005-092.html · Exploit
• https://redhat.com/security/data/cve/CVE-2005-0090.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0204.html · Nota
• https://bdu.fstec.ru/vul/2015-03380 · Nota de Segurança
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10667 · Nota
• https://redhat.com/security/data/cve/CVE-2005-0091.html · Nota
• https://rhn.redhat.com/errata/RHSA-2005-092.html · Nota
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• https://redhat.com/security/data/cve/CVE-2005-0177.html · Nota
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://securityfocus.com/bid/12198 · Nota
• https://redhat.com/security/data/cve/CVE-2005-0001.html · Nota
• http://secunia.com/advisories/17826 · Nota
• https://redhat.com/security/data/cve/CVE-2004-1137.html · Nota