| Description: | Description:
The remote host is missing updates announced in
advisory TSLSA-2004-0020.
CVE-2004-0109:
zen-parse discovered a buffer overflow vulnerability in the
ISO9660 filesystem component of Linux kernel which could be abused
by an attacker to gain unauthorised root access. Sebastian
Krahmer and Ernie Petrides developed a correction for this.
CVE-2004-0133:
Usage of not properly initialized memory in the XFS code was
discovered. This lead to an information leakage where some blocks
in the file system would contain old data from the system memory.
CVE-2004-0177:
Usage of not properly initialized memory in the ext3 code was
discovered by Solar Designer of the Openwall project. This lead to
an information leakage where some blocks in the file system would
contain old data from the system memory. This was the first such
vulnerability discovered, and directly lead to XFS and JFS being
checked for this.
CVE-2004-0181:
Usage of not properly initialized memory in the JFS code was
discovered. This lead to an information leakage where some blocks
in the file system would contain old data from the system memory.
Solution:
Update your system with the packages as indicated in
the referenced security advisory.
http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2004-0020
Risk factor : Medium
CVSS Score:
5.0
|
