Bug 65375 (CVE-2005-0504)

Summary: VUL-0: CVE-2005-0504: kernel: moxa serial driver problems
Product: [Novell Products] SUSE Security Incidents Reporter: Marcus Meissner <meissner>
Component: IncidentsAssignee: Marcus Meissner <meissner>
Status: RESOLVED FIXED QA Contact: Security Team bot <security-team>
Severity: Minor    
Priority: P3 - Medium CC: security-team
Version: unspecified   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: CVE-2005-0504: CVSS v2 Base Score: 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P)
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: moxa-ioctl-check.patch

Description Marcus Meissner 2005-02-01 17:50:41 UTC 
as reported by grsecurity. apparently no CAN.
Comment 1 Marcus Meissner 2005-02-01 17:50:42 UTC 
<!-- SBZ_reproduce  -->
n/a
Comment 2 Marcus Meissner 2005-02-01 17:51:16 UTC 
Created attachment 28094 [details]
moxa-ioctl-check.patch
Comment 3 Marcus Meissner 2005-02-01 17:51:34 UTC 
no 2.4 fix for this bug.
Comment 4 Hubert Mantel 2005-03-11 10:27:58 UTC 
Fix is in all 2.6 trees now (including HEAD as it's still missing from the
latest stock kernel).
Comment 5 Marcus Meissner 2005-03-14 09:16:43 UTC 
tracking
Comment 6 Marcus Meissner 2005-03-17 13:16:32 UTC 
CAN-2005-0504
Comment 7 Marcus Meissner 2005-03-24 17:23:26 UTC 
updates + advisory released
Comment 8 Thomas Biege 2009-10-13 21:02:54 UTC 
CVE-2005-0504: CVSS v2 Base Score: 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P)