CVE-2005-1264 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-1264
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-1264

Description: Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

CVE Status: Candidate

References: VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html REDHAT http://www.redhat.com/support/errata/RHSA-2005-420.html MLIST http://marc.theaimsgroup.com/?l=linux-kernel&m=111630512512222 FEDORA http://www.securityfocus.com/archive/1/archive/1/427980/100/0/threaded CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 BID 13651

Return to the previous page.