NVD

Id
71112  
Name
CVE-2004-0685  
Description
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-23  
Modified Date
2017-07-10  
Seq
2004-0685  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
367161 71112 CVE-2004-0685 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921  View
367162 71112 CVE-2004-0685 oval:org.mitre.oval:def:10665  View
367163 71112 CVE-2004-0685 DSA-1067  View
367164 71112 CVE-2004-0685 DSA-1069  View
367165 71112 CVE-2004-0685 DSA-1070  View
367166 71112 CVE-2004-0685 DSA-1082  View
367167 71112 CVE-2004-0685 GLSA-200408-24  View
367168 71112 CVE-2004-0685 VU#981134  View
367169 71112 CVE-2004-0685 RHSA-2004:504  View
367170 71112 CVE-2004-0685 RHSA-2004:505  View
367171 71112 CVE-2004-0685 10892  View
367172 71112 CVE-2004-0685 http://www.securityspace.com/smysecure/catid.html?id=14580  View
367173 71112 CVE-2004-0685 2004-0041  View
367174 71112 CVE-2004-0685 linux-usb-gain-privileges(16931)  View
367175 71112 CVE-2004-0685 FLSA:2336  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62972 JVNDB-2004-000314 Linux Kernel の copy_to_user() 関数を利用する USB ドライバにおける情報漏洩の脆弱性 Linux Kernel に実装されている copy_to_user() 関数を未初期化状態で利用する特定の USB ドライバには、メモリ管理の処理にセキュリティ上の不備があるため、情報が漏洩する脆弱性が存在します。 CVE-2004-0685 9112 CVE-2004-0685 71112 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000314.html 2004-08-09 2007-04-01 View