CVE

Id
50407  
CVE No.
CVE-2011-2495  
Status
Candidate  
Description
fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user"s password.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544883 50407 CVE-2011-2495 MLIST:[oss-security] 20110627 Re: CVE request: kernel: taskstats/procfs io infoleak  View
544884 50407 CVE-2011-2495 URL:http://www.openwall.com/lists/oss-security/2011/06/27/1  View
544885 50407 CVE-2011-2495 CONFIRM:http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4  View
544886 50407 CVE-2011-2495 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1d1221f375c94ef961ba8574ac4f85c8870ddd51  View
544887 50407 CVE-2011-2495 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=716825  View
544888 50407 CVE-2011-2495 CONFIRM:https://github.com/torvalds/linux/commit/1d1221f375c94ef961ba8574ac4f85c8870ddd51  View
544889 50407 CVE-2011-2495 REDHAT:RHSA-2011:1212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35033 JVNDB-2011-005275 nfs-utils の support/export/hostname.c の host_reliable_addrinfo 関数におけるファイルシステムをマウントされる脆弱性 nfs-utils の support/export/hostname.c の host_reliable_addrinfo 関数は、NFS エクスポートへのアクセスを検証する DNS を適切に使用しないため、ファイルシステムをマウントされる脆弱性が存在します。 CVE-2011-2500 50407 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005275.html  View