PT-2004-1711 · Broadcom · Linux

Infamous41Md · Published 2004-06-30 · Updated 2017-10-11 · CVE-2004-0619

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Broadcom 5820 cryptonet driver (affected versions not specified)

Description The issue is related to an integer overflow in the ubsec keysetup function, which can be exploited by local users to cause a denial of service (crash) and potentially execute arbitrary code. This is achieved by manipulating the add dsa buf bytes variable to a negative value, resulting in a buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0619

RHSA-2004:549

Affected Products

Linux

References · 9

• http://redhat.com/support/errata/RHSA-2005-283.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0619 · Security Note
• http://redhat.com/support/errata/RHSA-2004-549.html · Vendor Advisory
• http://securityfocus.com/bid/10599 · Vendor Advisory
• http://ciac.org/ciac/bulletins/p-047.shtml · Note
• http://secunia.com/advisories/11936 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16459 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773 · Note
• http://marc.info/?l=bugtraq&m=108802653409053&w=2 · Note