Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> SuSE Local Security Checks >> SUSE-SA:2005:029: kernel


Vulnerability Assessment Details

SUSE-SA:2005:029: kernel

Vulnerability Assessment Summary
Check for the version of the kernel package

Detailed Explanation for this Vulnerability Assessment

The remote host is missing the patch for the advisory SUSE-SA:2005:029 (kernel).


The Linux kernel is the core component of the Linux system.

This update fixes various security as well as non-security problems
discovered since the last round of kernel updates.


The following security problems have been fixed:

- when creating directories on ext2 filesystems the kernel did not
zero initialize the memory allocated. Therefore potentially
sensitive information could be exposed to users (CVE-2005-0400).

All SUSE LINUX based products are affected.

- local users can crash the kernel via a crafted ELF library or
executable, which causes a free of an invalid pointer
(CVE-2005-0749).

All SUSE LINUX based products are affected.

- local users could gain root access via a bluetooth socket
(CVE-2005-0750).

The fix for this problem was missing in SUSE LINUX 9.3 only.

- local users could gain root access by causing a core dump of
specially crafted ELF executables (CVE-2005-1263).

The problem is believed to be not exploitable on any SUSE LINUX
based product. The patch is included nevertheless.

- on the x86-64 platform various bugs permited local users to crash
the kernel or CPU (CVE-2005-0756, CVE-2005-1762, CVE-2005-1764,
CVE-2005-1765)

All SUSE LINUX based products on the x86-64 architecture are
affected.

- an overflow in the x86-64 ptrace code permited local users to
write a few bytes into kernel memory pages they normally
shouldn't have access to (CVE-2005-1763).

SLES 9 and SUSE LINUX 9.1-9.3 on the x86-64 architecture are
affected.

- insufficient checks in the 32bit DRM ioctl functions could permit
unprivileged local users to gain root access.

SLES 9 and SUSE LINUX 9.1-9.3 on the x86-64 architecture are
affected.



Solution : http://www.suse.de/security/advisories/2005_29_kernel.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Tenable Network Security

Cables, Connectors


Fanxiang 512GB 1TB 2TB 4TB SSD 2.5'' SATA III 6Gb/s TLC Internal Hard Drive Lot picture

Fanxiang 512GB 1TB 2TB 4TB SSD 2.5'' SATA III 6Gb/s TLC Internal Hard Drive Lot

$18.99



1TB 2.5

1TB 2.5" Internal Laptop TESTED Mixed Major Brands Hard Drives HDD - Tested

$20.35



Acer Aspire 3 Laptop 15.6

Acer Aspire 3 Laptop 15.6" 1TB AMD Ryzen 5 7520U 2.8GHz Certified Reburbished

$275.99



Samsung 1TB SSD Solid State Hard Drive MZ-KPU1T0T/0A6 Apple Macbook a1502 a1398 picture

Samsung 1TB SSD Solid State Hard Drive MZ-KPU1T0T/0A6 Apple Macbook a1502 a1398

$79.95



1TB 2TB Type C/USB-A USB 3.0 Flash Drive Thumb Drive Memory Stick for PC Laptop picture

1TB 2TB Type C/USB-A USB 3.0 Flash Drive Thumb Drive Memory Stick for PC Laptop

$18.26



Samsung - 990 EVO SSD 1TB Internal SSD PCIe Gen 4x4 | Gen 5x2 M.2 2280, Speed... picture

Samsung - 990 EVO SSD 1TB Internal SSD PCIe Gen 4x4 | Gen 5x2 M.2 2280, Speed...

$69.99



Type C USB 3.0 Flash Drive Thumb Drive Memory Stick for PC Laptop 1TB 2TB lot picture

Type C USB 3.0 Flash Drive Thumb Drive Memory Stick for PC Laptop 1TB 2TB lot

$353.59



Samsung - Geek Squad Certified Refurbished 870 EVO 1TB SATA Solid State Drive picture

Samsung - Geek Squad Certified Refurbished 870 EVO 1TB SATA Solid State Drive

$54.99



Western Digital Blue 1TB SATA 3.5 in HDD, 1 TB picture

Western Digital Blue 1TB SATA 3.5 in HDD, 1 TB

$24.99



Apple MacBook Pro 13.3” 2.5GHz i5 16GB RAM 1TB HDD Loaded picture

Apple MacBook Pro 13.3” 2.5GHz i5 16GB RAM 1TB HDD Loaded

$249.00



Discussions

No Discussions have been posted on this vulnerability.