PT-2005-4001 · Linux · Linux Kernel

Adr · Publicado 2005-10-11 · Atualizado 2017-02-19 · CVE-2005-3179

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.10 through 2.6.13

Description The issue allows local users to enable debugging and obtain sensitive information due to a debug file in sysfs being created with world-readable and world-writable permissions.

Recommendations For Linux kernel versions 2.6.10 through 2.6.13, consider restricting access to the debug file in sysfs to prevent local users from enabling DRM debugging and obtaining sensitive information.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2005-3179

Produtos afetados

Linux Kernel

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2005-3179 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDKSA-2005:235 · Aviso do Fabricante
• http://kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd · Nota
• http://securityfocus.com/advisories/9549 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2005:220 · Aviso do Fabricante
• http://secunia.com/advisories/17114 · Nota
• http://securityfocus.com/bid/15154 · Nota
• http://secunia.com/advisories/17280 · Nota
• http://bugs.gentoo.org/show_bug.cgi?id=107893 · Aviso do Fabricante