CVE

Id
12470  
CVE No.
CVE-2005-1264  
Status
Candidate  
Description
Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.  
Phase
Assigned (20050425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
89788 12470 CVE-2005-1264 MLIST:[linux-kernel] 20050517 [PATCH] Fix root hole in raw device  View
89789 12470 CVE-2005-1264 URL:http://marc.info/?l=linux-kernel&m=111630512512222  View
89790 12470 CVE-2005-1264 VULNWATCH:20050516 Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability  View
89791 12470 CVE-2005-1264 URL:http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html  View
89792 12470 CVE-2005-1264 VULNWATCH:20050517 Re: Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability  View
89793 12470 CVE-2005-1264 URL:http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html  View
89794 12470 CVE-2005-1264 CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10  View
89795 12470 CVE-2005-1264 FEDORA:FLSA:157459-3  View
89796 12470 CVE-2005-1264 URL:http://www.securityfocus.com/archive/1/archive/1/427980/100/0/threaded  View
89797 12470 CVE-2005-1264 REDHAT:RHSA-2005:420  View
89798 12470 CVE-2005-1264 URL:http://www.redhat.com/support/errata/RHSA-2005-420.html  View
89799 12470 CVE-2005-1264 BID:13651  View
89800 12470 CVE-2005-1264 URL:http://www.securityfocus.com/bid/13651  View
89801 12470 CVE-2005-1264 OVAL:oval:org.mitre.oval:def:10264  View
89802 12470 CVE-2005-1264 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10264  View
89803 12470 CVE-2005-1264 VUPEN:ADV-2005-0557  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62189 JVNDB-2005-000391 SpamAssassin の不正なメールヘッダの処理によるサービス運用妨害 (DoS) の脆弱性 SpamAssassin において、電子メールのヘッダの取り扱いに不備が存在するため、異常に長いヘッダのメールを処理した場合に、スパムメールの調査に非常に長い時間を要してしまう脆弱性が存在します。 CVE-2005-1266 12470 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000391.html  View