[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2005-0750Date: (C)2005-03-27   (M)2023-12-22


The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.2
Exploit Score: 3.9
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
BID-12911
http://marc.info/?l=bugtraq&m=111204562102633&w=2
FLSA:152532
RHSA-2005:283
RHSA-2005:284
RHSA-2005:293
RHSA-2005:366
kernel-bluezsockcreate-integer-underflow(19844)
oval:org.mitre.oval:def:11719

CPE    39
cpe:/o:linux:linux_kernel:2.6.11
cpe:/o:linux:linux_kernel:2.6.10
cpe:/o:suse:suse_linux:9.3
cpe:/o:linux:linux_kernel:2.4.26
...

© SecPod Technologies