CVE

Id
12795  
CVE No.
CVE-2005-1589  
Status
Candidate  
Description
The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264.  
Phase
Assigned (20050516)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
92159 12795 CVE-2005-1589 MLIST:[linux-kernel] 20050517 [PATCH] Fix root hole in pktcdvd  View
92160 12795 CVE-2005-1589 URL:http://marc.info/?l=linux-kernel&m=111630531515901&w=2  View
92161 12795 CVE-2005-1589 VULNWATCH:20050516 Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability  View
92162 12795 CVE-2005-1589 URL:http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html  View
92163 12795 CVE-2005-1589 VULNWATCH:20050517 Re: Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability  View
92164 12795 CVE-2005-1589 URL:http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html  View
92165 12795 CVE-2005-1589 VULNWATCH:20050517 Linux kernel pktcdvd ioctl break user space limit vulnerability [corrected]  View
92166 12795 CVE-2005-1589 URL:http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html  View
92167 12795 CVE-2005-1589 CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10  View
92168 12795 CVE-2005-1589 MANDRAKE:MDKSA-2005:219  View
92169 12795 CVE-2005-1589 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:219  View
92170 12795 CVE-2005-1589 BID:13651  View
92171 12795 CVE-2005-1589 URL:http://www.securityfocus.com/bid/13651  View
92172 12795 CVE-2005-1589 VUPEN:ADV-2005-0557  View
92173 12795 CVE-2005-1589 URL:http://www.vupen.com/english/advisories/2005/0557  View
92174 12795 CVE-2005-1589 SECUNIA:17826  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62109 JVNDB-2005-000311 Sun Solaris の rpc.nisd におけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris に実装されている rpc.nisd には、セキュリティ上の不備のため、 意図的なリクエストを標的 NIS+ サーバに送りつけることにより、rpc.nisd を無効にされてしまう脆弱性が存在します。 CVE-2005-1591 12795 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000311.html  View