CVE-2004-0565

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734	Vendor Advisory
http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html	Vendor Advisory
http://www.debian.org/security/2006/dsa-1070
http://www.debian.org/security/2006/dsa-1067
http://www.debian.org/security/2006/dsa-1069
http://www.securityfocus.com/bid/10687
http://secunia.com/advisories/20162
http://secunia.com/advisories/20163
http://www.redhat.com/support/errata/RHSA-2004-504.html
http://secunia.com/advisories/20202
http://www.debian.org/security/2006/dsa-1082
http://secunia.com/advisories/20338
http://www.mandriva.com/security/advisories?name=MDKSA-2004:066
https://exchange.xforce.ibmcloud.com/vulnerabilities/16644
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714

Configurations

Configuration 1 (hide)

cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:::::::*
	cpe:2.3:o:trustix:secure_linux:2:::::::*
	cpe:2.3:o:trustix:secure_linux:2.0:::::::*
	cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:::::::*
	cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:::::::*
	cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:::::::*
	cpe:2.3:o:gentoo:linux::::::::
	cpe:2.3:o:linux:linux_kernel:2.4.0:::::::*
	cpe:2.3:o:trustix:secure_linux:2.1:::::::*

Information

Published : 2004-12-06 05:00

Updated : 2017-10-11 01:29

NVD link : CVE-2004-0565

Mitre link : CVE-2004-0565

JSON object : View

Products Affected

linux

linux_kernel

mandrakesoft

mandrake_linux
mandrake_linux_corporate_server
mandrake_multi_network_firewall

gentoo

linux

trustix

secure_linux

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734", "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html", "name": "[owl-users] 20040619 Linux 2.4.26-ow2", "tags": ["Vendor Advisory"], "refsource": "MLIST"}, {"url": "http://www.debian.org/security/2006/dsa-1070", "name": "DSA-1070", "tags": [], "refsource": "DEBIAN"}, {"url": "http://www.debian.org/security/2006/dsa-1067", "name": "DSA-1067", "tags": [], "refsource": "DEBIAN"}, {"url": "http://www.debian.org/security/2006/dsa-1069", "name": "DSA-1069", "tags": [], "refsource": "DEBIAN"}, {"url": "http://www.securityfocus.com/bid/10687", "name": "10687", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/20162", "name": "20162", "tags": [], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/20163", "name": "20163", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-504.html", "name": "RHSA-2004:504", "tags": [], "refsource": "REDHAT"}, {"url": "http://secunia.com/advisories/20202", "name": "20202", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.debian.org/security/2006/dsa-1082", "name": "DSA-1082", "tags": [], "refsource": "DEBIAN"}, {"url": "http://secunia.com/advisories/20338", "name": "20338", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:066", "name": "MDKSA-2004:066", "tags": [], "refsource": "MANDRAKE"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16644", "name": "linux-ia64-info-disclosure(16644)", "tags": [], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714", "name": "oval:org.mitre.oval:def:10714", "tags": [], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-0565", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2004-12-06T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-10-11T01:29Z"}