| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / april, 2005 / Linux kernel ext2 directory creation memory leak vulnerability 

Linux kernel ext2 directory creation memory leak vulnerabili

Linux kernel ext2 directory creation memory leak vulnerabili

Date Discovered: Tuesday, March 29, 2005
Date Published: Wednesday, March 30, 2005
Last Updated: Wednesday, March 30, 2005

Vulnerability Description

Vulnerability ID:         32670
Discovered By:           Mathieu Lafon
Exploitable Locally:    Yes
Exploitable Remotely: No
Impact:                        Local attackers can possibly gain sensitive information.
Root Cause:                 Software Vulnerability

The Linux kernel contains a vulnerability that can allow a local attacker to possibly gain sensitive information. The vulnerability is due to the file block not being initialized on directory creation. An attacker can possibly read the block to gain sensitive data.

 

 

More information on CA Vulnerability Information Center: 
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32670

Computer Associates – the Trusted Source of Security Knowledge

 

2005-04-01 12:52

Back