PT-2005-1466 · Red Hat · Red Hat Enterprise Linux 3+1

Wendy Cheng

·

Publicado

2005-04-22

·

Atualizado

2017-10-11

·

CVE-2005-0403

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux 3
Description The issue is related to the init dev function in tty io.c, which does not properly clear controlling ttys in multi-threaded applications. This can allow local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure.
Recommendations For Red Hat Enterprise Linux 3, apply the necessary patches or updates to fix the issue in the init dev function in tty io.c. As a temporary workaround, consider restricting access to multi-threaded applications that utilize the init dev function until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-0403
RHSA-2005:293
RHSA-2005_293

Produtos afetados

Red Hat
Red Hat Enterprise Linux 3