PT-2005-1785 · Linux+1 · Linux Kernel+1

Matthew Miller

·

Published

2005-03-27

·

Updated

2017-10-11

·

CVE-2005-0750

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.6 through 2.4.30-rc1 Linux kernel versions 2.6 through 2.6.11.5
Description The issue allows local users to gain privileges through the bluez sock create function in the Bluetooth stack. This can be achieved via a socket or socketpair call with a negative protocol value.
Recommendations For Linux kernel versions 2.4.6 through 2.4.30-rc1, consider updating to a version outside of this range to resolve the issue. For Linux kernel versions 2.6 through 2.6.11.5, consider updating to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the bluez sock create function until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2005-0750
RHSA-2005:293
RHSA-2005:366
RHSA-2005_293
RHSA-2005_366

Affected Products

Linux Kernel
Red Hat