2.1 - CVE-2005-0135

Executive Summary

Informations
Name	CVE-2005-0135	First vendor Publication	2005-05-02
Vendor	Cve	Last vendor Modification	2023-11-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	2.1	Attack Range	Local
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash).

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0135

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:9040

Oval ID:	oval:org.mitre.oval:def:9040
Title:	The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
Description:	The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash).
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-0135	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-27.0.4.EL AND kernel-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-smp-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-hugemem-unsupported is earlier than 0:2.4.21-27.0.4.EL AND kernel-hugemem is earlier than 0:2.4.21-27.0.4.EL AND kernel is earlier than 0:2.4.21-27.0.4.EL AND kernel-source is earlier than 0:2.4.21-27.0.4.EL AND kernel-doc is earlier than 0:2.4.21-27.0.4.EL AND kernel-smp is earlier than 0:2.4.21-27.0.4.EL OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section kernel-smp-devel is earlier than 0:2.6.9-5.0.5.EL AND kernel-hugemem is earlier than 0:2.6.9-5.0.5.EL AND kernel-devel is earlier than 0:2.6.9-5.0.5.EL AND kernel is earlier than 0:2.6.9-5.0.5.EL AND kernel-hugemem-devel is earlier than 0:2.6.9-5.0.5.EL AND kernel-doc is earlier than 0:2.6.9-5.0.5.EL AND kernel-smp is earlier than 0:2.6.9-5.0.5.EL

CPE : Common Platform Enumeration

Type	Description	Count
Os	Linux Linux Kernel cpe:2.3:o:linux:linux_kernel:2.6.0:-::::::	1

OpenVAS Exploits

Date	Description
2009-10-10	Name : SLES9: Security update for Linux kernel File : nvt/sles9p5011171.nasl
2008-01-17	Name : Debian Security Advisory DSA 1067-1 (kernel 2.4.16) File : nvt/deb_1067_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1070-1 (kernel-source-2.4.19,kernel-image-sparc-... File : nvt/deb_1070_1.nasl
2008-01-17	Name : Debian Security Advisory DSA 1082-1 (kernel-2.4.17) File : nvt/deb_1082_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
15728	Red Hat Linux Itanium unw_unwind_to_user Function Local DoS Red Hat Linux for Itanium contains a flaw that may allow a local denial of service. The issue is triggered by a flaw in unw_unwind_to_user function, and will result in loss of availability for the platform.

Nessus® Vulnerability Scanner

Date	Description
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1067.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1069.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1070.nasl - Type : ACT_GATHER_INFO
2006-10-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1082.nasl - Type : ACT_GATHER_INFO
2006-07-05	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2005-293.nasl - Type : ACT_GATHER_INFO
2006-07-05	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2005-366.nasl - Type : ACT_GATHER_INFO
2005-04-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2005-293.nasl - Type : ACT_GATHER_INFO
2005-04-19	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2005-366.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://linux.bkbits.net:8080/linux-2.6/cset%4041f2beablXVnAs_6fznhhITh1j5hZg

Source	Url
BID	http://www.securityfocus.com/bid/13266
CONFIRM	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=148868
DEBIAN	http://www.debian.org/security/2006/dsa-1067 http://www.debian.org/security/2006/dsa-1069 http://www.debian.org/security/2006/dsa-1070 http://www.debian.org/security/2006/dsa-1082
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2005-284.html http://www.redhat.com/support/errata/RHSA-2005-293.html http://www.redhat.com/support/errata/RHSA-2005-366.html
SECUNIA	http://secunia.com/advisories/15019 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-02-02 01:02:51	Multiple Updates
2024-02-01 12:01:38	Multiple Updates
2023-11-07 21:48:08	Multiple Updates
2021-05-04 12:02:44	Multiple Updates
2021-04-22 01:02:56	Multiple Updates
2020-05-23 00:16:17	Multiple Updates
2017-10-11 09:23:27	Multiple Updates
2016-04-26 13:14:29	Multiple Updates
2014-02-17 10:29:48	Multiple Updates
2013-05-11 11:20:06	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	1
CPE ID(s)	1
Sources(s)	15
osvdb(s)	1
Openvas Exploit(s)	4
Nessus® Exploit(s)	8

	Related
10	DSA-1082
10	DSA-1070
10	DSA-1069
10	DSA-1067
7.8	RHSA-2005:366
7.2	RHSA-2005:293
7.2	RHSA-2005:284
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 7 more Alert(s)

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0424s

Facebook rss twitter linkedin mail