CVE-2005-0400 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-0400
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0400

Description: The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/19866 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-103-1 SAID Secunia Advisory: SA14713 Secunia Advisory: SA17002 Secunia Advisory: SA18684 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0191.html http://www.redhat.com/support/errata/RHSA-2005-366.html http://www.redhat.com/support/errata/RHSA-2006-0190.html http://www.redhat.com/support/errata/RHSA-2005-663.html MISC http://arkoon.net/advisories/ext2-make-empty-leak.txt FEDORA CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=111238764720696&w=2 BID 12932

Return to the previous page.