CVE-2005-1369

The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8	Patch
http://lkml.org/lkml/2005/4/20/159
http://www.securityfocus.com/archive/1/427980/100/0/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel:2.6.0:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.1:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.1:rc1::::::
	cpe:2.3:o:linux:linux_kernel:2.6.1:rc2::::::
	cpe:2.3:o:linux:linux_kernel:2.6.2:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.3:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.4:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.5:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.6:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.7:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.8:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.8.1:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20::::::
	cpe:2.3:o:linux:linux_kernel:2.6.10:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.10:rc2::::::
	cpe:2.3:o:linux:linux_kernel:2.6.11:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.12:rc1::::::

History

No history.

Information

Published : 2005-05-02 04:00

Updated : 2024-02-28 10:42

NVD link : CVE-2005-1369

Mitre link : CVE-2005-1369

CVE.ORG link : CVE-2005-1369

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-Other

{"id": "CVE-2005-1369", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-05-02T04:00:00.000", "references": [{"url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://lkml.org/lkml/2005/4/20/159", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/427980/100/0/threaded", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs \"alarms\" file with write permissions, which allows local users to cause a denial of service (CPU consumption) by attempting to write to the file, which does not have an associated store function."}], "lastModified": "2018-10-19T15:31:47.627", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "142BCD48-8387-4D0C-A052-44DD4144CBFF"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8220D81-9065-471F-9256-CFE7B9941555"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2A55C17-C530-4898-BC95-DE4D495F0D7C"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C14A949-E2B8-4100-8ED4-645CB996B08A"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB445E3E-CCBD-4737-BE30-841B9A79D558"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5301E27-8021-467C-A9A2-AF2137EF0299"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79787868-2D77-4B55-AD61-C2B357CCE047"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "455E647F-73DD-400A-AA19-3D93FE2E57AE"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FC53528-A67F-42DF-B8DA-778A65893F9D"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B130EB7-A951-4717-A906-E2F602F7B69F"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D90502F-EC45-4ADC-9428-B94346DA660B"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "169446DE-67F8-4738-91FE-ED8058118F80"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}