CVE

Id
9242  
CVE No.
CVE-2004-0814  
Status
Candidate  
Description
Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.  
Phase
Assigned (20040825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61008 9242 CVE-2004-0814 BUGTRAQ:20041020 CAN-2004-0814: Linux terminal layer races  View
61009 9242 CVE-2004-0814 URL:http://www.securityfocus.com/archive/1/379005  View
61010 9242 CVE-2004-0814 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672  View
61011 9242 CVE-2004-0814 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110  View
61012 9242 CVE-2004-0814 FEDORA:FLSA:2336  View
61013 9242 CVE-2004-0814 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2336  View
61014 9242 CVE-2004-0814 MANDRAKE:MDKSA-2005:022  View
61015 9242 CVE-2004-0814 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:022  View
61016 9242 CVE-2004-0814 BUGTRAQ:20041214 [USN-38-1] Linux kernel vulnerabilities  View
61017 9242 CVE-2004-0814 URL:http://marc.info/?l=bugtraq&m=110306397320336&w=2  View
61018 9242 CVE-2004-0814 REDHAT:RHSA-2005:293  View
61019 9242 CVE-2004-0814 URL:http://www.redhat.com/support/errata/RHSA-2005-293.html  View
61020 9242 CVE-2004-0814 BID:11491  View
61021 9242 CVE-2004-0814 URL:http://www.securityfocus.com/bid/11491  View
61022 9242 CVE-2004-0814 BID:11492  View
61023 9242 CVE-2004-0814 URL:http://www.securityfocus.com/bid/11492  View
61024 9242 CVE-2004-0814 OVAL:oval:org.mitre.oval:def:10728  View
61025 9242 CVE-2004-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10728  View
61026 9242 CVE-2004-0814 XF:linux-tiocsetd-race-condition(17816)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63069 JVNDB-2004-000411 Samba のパス変換ルーチンにおける共有制限を回避される脆弱性 Samba には、ファイルパスを取り扱う際の変換ルーチンで unix_clean_name() 関数が 2 回呼び出されており、これにより共有外のファイルに対してのアクセスを許可してしまう脆弱性が存在します。 CVE-2004-0815 9242 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000411.html  View