CVE-2005-3179

Summary

drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.mandriva.com/security/advisories?name=MDKSA-2005:235
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
• http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd
• http://secunia.com/advisories/17280
• http://www.securityfocus.com/bid/15154
• http://www.securityfocus.com/advisories/9549
• http://secunia.com/advisories/17114
• http://bugs.gentoo.org/show_bug.cgi?id=107893

References

• http://www.mandriva.com/security/advisories?name=MDKSA-2005:235
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
• http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd
• http://secunia.com/advisories/17280
• http://www.securityfocus.com/bid/15154
• http://www.securityfocus.com/advisories/9549
• http://secunia.com/advisories/17114
• http://bugs.gentoo.org/show_bug.cgi?id=107893

• ←Previous
• Next→