CVE-2009-0676 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2009-0676
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2009-0676

Description: The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/48847 UBUNTU http://www.ubuntu.com/usn/usn-751-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html SAID Secunia Advisory: SA34786 Secunia Advisory: SA34680 Secunia Advisory: SA34394 Secunia Advisory: SA33758 Secunia Advisory: SA34502 Secunia Advisory: SA34962 Secunia Advisory: SA34981 Secunia Advisory: SA35011 Secunia Advisory: SA35390 Secunia Advisory: SA35394 Secunia Advisory: SA37471 REDHAT http://www.redhat.com/support/errata/RHSA-2009-0326.html http://rhn.redhat.com/errata/RHSA-2009-0459.html http://www.redhat.com/support/errata/RHSA-2009-0360.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11653 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8618 MLIST http://www.openwall.com/lists/oss-security/2009/03/02/6 http://www.openwall.com/lists/oss-security/2009/02/24/1 http://marc.info/?l=linux-kernel&m=123540732700371&w=2 http://openwall.com/lists/oss-security/2009/02/20/1 http://lkml.org/lkml/2009/2/12/123 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2009:071 DEBIAN http://www.debian.org/security/2009/dsa-1794 http://www.debian.org/security/2009/dsa-1749 http://www.debian.org/security/2009/dsa-1787 CONFIRM http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://patchwork.kernel.org/patch/6816/ http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=df0bca049d01c0ee94afb7cd5dfd959541e6c8da BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/507985/100/0/threaded BID 33846

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability