PT-2005-5554 · Linux+2 · Linux Kernel+2
Andreas Gruenbacher
·
Published
1970-01-01
·
Updated
2024-02-16
·
CVE-2005-2801
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Debian GNU/Linux kernel-image-2.4.27-* versions
Debian GNU/Linux kernel-headers-2.4.27-* versions
Debian GNU/Linux kernel-pcmcia-modules-2.4.27-* versions
Debian GNU/Linux kernel-patch-2.4.27-* versions
Debian GNU/Linux kernel-build-2.4.27-* versions
Debian GNU/Linux kernel-tree-2.4.27 versions
Debian GNU/Linux kernel-source-2.4.27 versions
Debian GNU/Linux kernel-doc-2.4.27 versions
Debian GNU/Linux mips-tools versions
Description
The issue is related to multiple vulnerabilities in the Debian GNU/Linux kernel packages, which can lead to a disruption of protected information. These vulnerabilities can be exploited remotely. The problem is also related to the ext2 and ext3 file system code for the Linux kernel 2.6, where the xattr.c does not properly compare the name index fields when sharing xattr blocks, potentially preventing default ACLs from being applied.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linux Kernel
Red Hat