PT-2004-3745 · Linux+1 · Linux Kernel+1

Published 1970-01-01 · Updated 2008-09-05 · CVE-2005-0489

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux kernel-image-2.4.19-sun4u-smp versions 2.4.19 Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs versions 2.4.18 Debian GNU/Linux kernel-image-2.4.18-sun4u versions 2.4.18 Debian GNU/Linux kernel-patch-benh versions not specified Debian GNU/Linux kernel-image-2.4.18-sun4u-smp versions 2.4.18 Debian GNU/Linux kernel-headers-2.4.19-sparc versions 2.4.19 Debian GNU/Linux kernel-headers-2.4.18-sparc versions 2.4.18 Debian GNU/Linux kernel-image-2.4.19-sun4u versions 2.4.19 Linux kernel versions prior to 2.4.17

Description The issue affects the Linux kernel and Debian GNU/Linux operating system, allowing for potential disruption of confidentiality, integrity, and availability of protected information. Exploitation can be done remotely. The /proc handling in the Linux kernel 2.4 before 2.4.17 is also vulnerable, allowing local users to cause a denial of service via unknown vectors that cause an invalid access of free memory.

Recommendations For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version 2.4.19, update to a version later than 2.4.19. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version 2.4.18, update to a version later than 2.4.18. For Debian GNU/Linux kernel-image-2.4.18-sun4u version 2.4.18, update to a version later than 2.4.18. For Debian GNU/Linux kernel-patch-benh, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version 2.4.18, update to a version later than 2.4.18. For Debian GNU/Linux kernel-headers-2.4.19-sparc version 2.4.19, update to a version later than 2.4.19. For Debian GNU/Linux kernel-headers-2.4.18-sparc version 2.4.18, update to a version later than 2.4.18. For Debian GNU/Linux kernel-image-2.4.19-sun4u version 2.4.19, update to a version later than 2.4.19. For Linux kernel versions prior to 2.4.17, update to version 2.4.17 or later.

Related Identifiers

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2005-0489

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

Affected Products

Debian

Linux Kernel

References · 50

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Security Note
• https://bdu.fstec.ru/vul/2015-03576 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Security Note
• https://bdu.fstec.ru/vul/2015-03384 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Security Note
• http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes · Patch
• http://debian.org/security/2006/dsa-1069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0565 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0984 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0883 · Security Note