CVE ID:	CVE-2004-0685
Description:	Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.1.2006.1069   1.3.6.1.4.1.25623.1.0.56836   1.3.6.1.4.1.25623.1.0.56787   1.3.6.1.4.1.25623.1.0.56784   1.3.6.1.4.1.25623.1.0.54315
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0685 BugTraq ID: 10892 http://www.securityfocus.com/bid/10892 CERT/CC vulnerability note: VU#981134 http://www.kb.cert.org/vuls/id/981134 Debian Security Information: DSA-1067 (Google Search) http://www.debian.org/security/2006/dsa-1067 Debian Security Information: DSA-1069 (Google Search) http://www.debian.org/security/2006/dsa-1069 Debian Security Information: DSA-1070 (Google Search) http://www.debian.org/security/2006/dsa-1070 Debian Security Information: DSA-1082 (Google Search) http://www.debian.org/security/2006/dsa-1082 https://bugzilla.fedora.us/show_bug.cgi?id=2336 http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml http://www.securityspace.com/smysecure/catid.html?id=14580 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10665 RedHat Security Advisories: RHSA-2004:504 http://www.redhat.com/support/errata/RHSA-2004-504.html RedHat Security Advisories: RHSA-2004:505 http://www.redhat.com/support/errata/RHSA-2004-505.html http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 http://www.trustix.net/errata/2004/0041/ XForce ISS Database: linux-usb-gain-privileges(16931) https://exchange.xforce.ibmcloud.com/vulnerabilities/16931