PT-2005-1785 · Linux+1 · Linux Kernel+1

Matthew Miller

·

Publicado

2005-03-27

·

Atualizado

2017-10-11

·

CVE-2005-0750

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.6 through 2.4.30-rc1 Linux kernel versions 2.6 through 2.6.11.5
Description The issue allows local users to gain privileges through the bluez sock create function in the Bluetooth stack. This can be achieved via a socket or socketpair call with a negative protocol value.
Recommendations For Linux kernel versions 2.4.6 through 2.4.30-rc1, consider updating to a version outside of this range to resolve the issue. For Linux kernel versions 2.6 through 2.6.11.5, consider updating to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the bluez sock create function until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-0750
RHSA-2005:293
RHSA-2005:366
RHSA-2005_293
RHSA-2005_366

Produtos afetados

Linux Kernel
Red Hat