The pkt_ioctl function in the pktcdvd block device ioctl handler...
Vulnerability Description
The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1589
Credits & Attribution
No credits recorded in the NVD database.
References
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10
- http://marc.info/?l=linux-kernel&m=111630531515901&w=2
- http://www.vupen.com/english/advisories/2005/0557
- http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html
- http://www.securityfocus.com/bid/13651
- http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html
- http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html
- http://secunia.com/advisories/17826
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
More from linux
View All →Affected Vendor
linux
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.