PT-2005-5554 · Linux+2 · Linux Kernel+2
Andreas Gruenbacher
·
Publicado
1970-01-01
·
Atualizado
2024-02-16
·
CVE-2005-2801
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Debian GNU/Linux kernel-image-2.4.27-* versions
Debian GNU/Linux kernel-headers-2.4.27-* versions
Debian GNU/Linux kernel-pcmcia-modules-2.4.27-* versions
Debian GNU/Linux kernel-patch-2.4.27-* versions
Debian GNU/Linux kernel-build-2.4.27-* versions
Debian GNU/Linux kernel-tree-2.4.27 versions
Debian GNU/Linux kernel-source-2.4.27 versions
Debian GNU/Linux kernel-doc-2.4.27 versions
Debian GNU/Linux mips-tools versions
Description
The issue is related to multiple vulnerabilities in the Debian GNU/Linux kernel packages, which can lead to a disruption of protected information. These vulnerabilities can be exploited remotely. The problem is also related to the ext2 and ext3 file system code for the Linux kernel 2.6, where the xattr.c does not properly compare the name index fields when sharing xattr blocks, potentially preventing default ACLs from being applied.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Linux Kernel
Red Hat