CVE

Id
9466  
CVE No.
CVE-2004-1038  
Status
Candidate  
Description
A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.  
Phase
Assigned (20041116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63609 9466 CVE-2004-1038 BUGTRAQ:20041026 pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security  View
63610 9466 CVE-2004-1038 URL:http://marc.info/?l=bugtraq&m=109881362530790&w=2  View
63611 9466 CVE-2004-1038 BUGTRAQ:20080305 Firewire Attack on Windows Vista  View
63612 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489163/100/0/threaded  View
63613 9466 CVE-2004-1038 BUGTRAQ:20080305 RE: Firewire Attack on Windows Vista  View
63614 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489189/100/0/threaded  View
63615 9466 CVE-2004-1038 BUGTRAQ:20080305 Re: Firewire Attack on Windows Vista  View
63616 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489175/100/0/threaded  View
63617 9466 CVE-2004-1038 BUGTRAQ:20080309 Re: [Full-disclosure] Firewire Attack on Windows Vista  View
63618 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489322/100/0/threaded  View
63619 9466 CVE-2004-1038 BUGTRAQ:20080309 Re: Firewire Attack on Windows Vista  View
63620 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489335/100/0/threaded  View
63621 9466 CVE-2004-1038 BUGTRAQ:20080310 RE: [Full-disclosure] Firewire Attack on Windows Vista  View
63622 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489330/100/0/threaded  View
63623 9466 CVE-2004-1038 BUGTRAQ:20080310 Re: [Full-disclosure] Firewire Attack on Windows Vista  View
63624 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489342/100/0/threaded  View
63625 9466 CVE-2004-1038 BUGTRAQ:20080306 RE: Firewire Attack on Windows Vista  View
63626 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489257/100/0/threaded  View
63627 9466 CVE-2004-1038 BUGTRAQ:20080306 Re: Firewire Attack on Windows Vista  View
63628 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489212/100/0/threaded  View
63629 9466 CVE-2004-1038 BUGTRAQ:20080307 Re: Firewire Attack on Windows Vista  View
63630 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489269/100/0/threaded  View
63631 9466 CVE-2004-1038 BUGTRAQ:20080308 RE: [Full-disclosure] Firewire Attack on Windows Vista  View
63632 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489296/100/0/threaded  View
63633 9466 CVE-2004-1038 BUGTRAQ:20080308 Re: [Full-disclosure] Firewire Attack on Windows Vista  View
63634 9466 CVE-2004-1038 URL:http://www.securityfocus.com/archive/1/archive/1/489295/100/0/threaded  View
63635 9466 CVE-2004-1038 MISC:http://pacsec.jp/advisories.html  View
63636 9466 CVE-2004-1038 MISC:http://it.slashdot.org/article.pl?sid=08/03/04/1258210  View
63637 9466 CVE-2004-1038 MISC:http://md.hudora.de/presentations/firewire/2005-firewire-cansecwest.pdf  View
63638 9466 CVE-2004-1038 MISC:http://storm.net.nz/projects/16  View
63639 9466 CVE-2004-1038 MISC:http://storm.net.nz/static/files/ab_firewire_rux2k6-final.pdf  View
63640 9466 CVE-2004-1038 MISC:http://www.sec-consult.com/fileadmin/Whitepapers/Vista_Physical_Attacks.pdf  View
63641 9466 CVE-2004-1038 MISC:http://www.theage.com.au/news/security/hack-into-a-windows-pc-no-password-needed/2008/03/04/1204402423638.html  View
63642 9466 CVE-2004-1038 XF:firewire-ieee1394-interface-installed(18041)  View

Related JVN