NVD

Id
71438  
Name
CVE-2004-1038  
Description
A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-03-01  
Modified Date
2017-07-10  
Seq
2004-1038  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369380 71438 CVE-2004-1038 http://it.slashdot.org/article.pl?sid=08/03/04/1258210  View
369381 71438 CVE-2004-1038 20041026 pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security  View
369382 71438 CVE-2004-1038 http://md.hudora.de/presentations/firewire/2005-firewire-cansecwest.pdf  View
369383 71438 CVE-2004-1038 http://pacsec.jp/advisories.html  View
369384 71438 CVE-2004-1038 http://storm.net.nz/projects/16  View
369385 71438 CVE-2004-1038 http://storm.net.nz/static/files/ab_firewire_rux2k6-final.pdf  View
369386 71438 CVE-2004-1038 http://www.sec-consult.com/fileadmin/Whitepapers/Vista_Physical_Attacks.pdf  View
369387 71438 CVE-2004-1038 20080305 Firewire Attack on Windows Vista  View
369388 71438 CVE-2004-1038 20080305 Re: Firewire Attack on Windows Vista  View
369389 71438 CVE-2004-1038 20080305 RE: Firewire Attack on Windows Vista  View
369390 71438 CVE-2004-1038 20080306 Re: Firewire Attack on Windows Vista  View
369391 71438 CVE-2004-1038 20080306 RE: Firewire Attack on Windows Vista  View
369392 71438 CVE-2004-1038 20080307 Re: Firewire Attack on Windows Vista  View
369393 71438 CVE-2004-1038 20080308 Re: [Full-disclosure] Firewire Attack on Windows Vista  View
369394 71438 CVE-2004-1038 20080308 RE: [Full-disclosure] Firewire Attack on Windows Vista  View
369395 71438 CVE-2004-1038 20080309 Re: [Full-disclosure] Firewire Attack on Windows Vista  View
369396 71438 CVE-2004-1038 20080310 RE: [Full-disclosure] Firewire Attack on Windows Vista  View
369397 71438 CVE-2004-1038 20080309 Re: Firewire Attack on Windows Vista  View
369398 71438 CVE-2004-1038 20080310 Re: [Full-disclosure] Firewire Attack on Windows Vista  View
369399 71438 CVE-2004-1038 http://www.theage.com.au/news/security/hack-into-a-windows-pc-no-password-needed/2008/03/04/1204402423638.html  View
369400 71438 CVE-2004-1038 firewire-ieee1394-interface-installed(18041)  View

Related JVN