bugtraq - [ESA-20032407-018] Several local 'kernel' vulnerabilities.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030724134503.3997011D358@juggernaut.guardiandigital.com>
Date: Thu, 24 Jul 2003 09:44:54 -0400 (EDT)
From: EnGarde Secure Linux <security@...rdiandigital.com>
To: engarde-security@...rdiandigital.com, bugtraq@...urityfocus.com
Subject: [ESA-20032407-018] Several local 'kernel' vulnerabilities.


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


+------------------------------------------------------------------------+
| Guardian Digital Security Advisory                       July 24, 2003 |
| http://www.guardiandigital.com                        ESA-20032407-018 |
|                                                                        |
| Package: kernel                                                        |
| Summary: several local vulnerabilities.                                |
+------------------------------------------------------------------------+

  EnGarde Secure Linux is an enterprise class Linux platform engineered
  to enable corporations to quickly and cost-effectively build a complete
  and secure Internet presence while preventing Internet threats.

OVERVIEW
- --------
  This kernel update fixes several bugs and vulnerabilities.  A summary
  of the changes from the last kernel update are below.

    * A vulnerability in the TTY layer allows local attackers to cause
      a denial of service ("kernel oops").

      The Common Vulnerabilities and Exposures project (cve.mitre.org) has
      assigned the name CAN-2003-0247 to this issue.

    * The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU
      state registers via a malformed address.

      The Common Vulnerabilities and Exposures project (cve.mitre.org) has
      assigned the name CAN-2003-0248 to this issue.

    * Paul Starzetz discovered a race condition in the execve() system
      call.  This file read race condition could be used to cause a
      denial of service (local crash).

      The Common Vulnerabilities and Exposures project (cve.mitre.org) has
      assigned the name CAN-2003-0462 to this issue.

    * The execve system call records the file descriptor of the executable
      process in the file table of the calling process, which allows local
      users to gain read access to restricted file descriptors.

      The Common Vulnerabilities and Exposures project (cve.mitre.org) has
      assigned the name CAN-2003-0476 to this issue.

    * The /proc filesystem allows local users to obtain sensitive
      information by opening various entries in /proc/self before
      executing a setuid program, which causes the program to fail to
      change the ownership and permissions of that entry.

      The Common Vulnerabilities and Exposures project (cve.mitre.org) has
      assigned the name CAN-2003-0501 to this issue.

  This update also upgrades the Linux kernel to the most recent stable
  version (2.4.21).

  Guardian Digital products affected by this issue include:

    EnGarde Secure Community 2
    EnGarde Secure Professional v1.5

  It is recommended that all users apply this update as soon as possible.

SOLUTION
- --------
  Guardian Digital Secure Network subscribers may automatically update
  affected systems by accessing their account from within the Guardian
  Digital WebTool.

  To modify your GDSN account and contact preferences, please go to:

    https://www.guardiandigital.com/account/

REFERENCES
- ----------
  Guardian Digital's public key:
    http://ftp.engardelinux.org/pub/engarde/ENGARDE-GPG-KEY

  Official Web Site of the Linux Kernel:
    http://www.kernel.org/

  Guardian Digital Advisories:
    http://infocenter.guardiandigital.com/advisories/

  Security Contact: security@...rdiandigital.com

- --------------------------------------------------------------------------
Author: Ryan W. Maple <ryan@...rdiandigital.com>
Copyright 2003, Guardian Digital, Inc.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/H+LeHD5cqd57fu0RAkmOAJ9bae4pcofCs0Ae2MPU4/LN30EGmQCfQ74x
5uh4G/lriHXlLcNdzebWkn8=
=2YPQ
-----END PGP SIGNATURE-----