Secunia
Login
|
|
CVE Reference: CVE-2012-2313 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2012-2313 |
|
|
Description: The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call. |
|
|
CVE Status: Candidate |
|
|
References: REDHAT http://rhn.redhat.com/errata/RHSA-2012-1174.html http://rhn.redhat.com/errata/RHSA-2012-1481.html http://rhn.redhat.com/errata/RHSA-2012-1589.html http://rhn.redhat.com/errata/RHSA-2012-1541.html MLIST http://www.openwall.com/lists/oss-security/2012/05/04/8 CONFIRM http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1bb57e940e1958e40d51f2078f50c3a96a9b2d75 BID 53965 |
|
| Return to the previous page. |
