CVE-2004-0535 - Secunia.com

CVE Reference: CVE-2004-0535
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0535

Description: The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/16159 SUSE http://www.novell.com/linux/security/advisories/2004_20_kernel.html SGI REDHAT http://www.redhat.com/support/errata/RHSA-2004-418.html http://www.redhat.com/support/errata/RHSA-2004-413.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11136 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2004:062 GENTOO http://security.gentoo.org/glsa/glsa-200407-02.xml FEDORA http://lwn.net/Articles/91155/ CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168 http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845 BID 10352

Return to the previous page.

Secunia