PT-2004-1097 · Gentoo Linux+3 · Aa-Sources+3
Published
2004-04-17
·
Updated
2017-10-11
·
CVE-2004-0181
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux versions 2.4.x
aa-sources versions prior to 2.4.23-r2
Description
The issue concerns an information leak in the JFS file system code in Linux, allowing local users to obtain sensitive information by reading the raw device. Additionally, there are multiple vulnerabilities in the aa-sources package of Gentoo Linux, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.
Recommendations
For Linux versions 2.4.x, consider updating to a version that does not contain the JFS file system code vulnerability.
For aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later to resolve the vulnerabilities.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Jfs
Linux
Red Hat
Aa-Sources