National Cyber Awareness System

Vulnerability Summary for CVE-2004-0814

Overview

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: linux-tiocsetd-race-condition(17816)

Type: Advisory; Patch Information

Hyperlink:http://xforce.iss.net/xforce/xfdb/17816

External Source: BID

Name: 11492

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/11492

External Source: BID

Name: 11491

Type: Advisory; Patch Information

Hyperlink:http://www.securityfocus.com/bid/11491

External Source: FEDORA

Name: FLSA:2336

Hyperlink:https://bugzilla.fedora.us/show_bug.cgi?id=2336

External Source: BUGTRAQ

Name: 20041020 CAN-2004-0814: Linux terminal layer races

Hyperlink:http://www.securityfocus.com/archive/1/379005

External Source: OVAL

Name: oval:org.mitre.oval:def:10728

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10728

External Source: BUGTRAQ

Name: 20041214 [USN-38-1] Linux kernel vulnerabilities

Type: Advisory

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=110306397320336&w=2

External Source: CONFIRM

Name: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110

Hyperlink:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110

External Source: CONFIRM

Name: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672

Hyperlink:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672

External Source: REDHAT

Name: RHSA-2005:293

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-293.html

External Source: MANDRAKE

Name: MDKSA-2005:022

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:022

References to Check Content

Identifier:oval:org.mitre.oval:def:10728

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10728