|
|
CVE Reference: CVE-2005-1589 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2005-1589 |
|
|
Description: The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264. |
|
|
CVE Status: Candidate |
|
|
References: VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html SAID Secunia Advisory: SA17826 MLIST http://marc.theaimsgroup.com/?l=linux-kernel&m=111630531515901&w=2 MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:219 MANDRAKE http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:219 CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10 BID 13651 |
|
| Return to the previous page. |
