CVE-2004-1038
Summary
| CVE | CVE-2004-1038 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-03-01 05:00:00 UTC |
| Updated | 2018-10-19 15:30:00 UTC |
| Description | A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ieee | Firewire Ieee | 1394 | All | All | All |
| Application | Ieee | Firewire Ieee | 1394 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 404 Not Found | MISC | www.sec-consult.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Aging Security Vulnerability Still Allows PC Takeover - Slashdot | MISC | it.slashdot.org | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| PacSec.JP/core04 | MISC | pacsec.jp | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Hack into a Windows PC - no password needed - Security - Technology | MISC | www.theage.com.au | |
| 'pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security' - MARC | BUGTRAQ | marc.info | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| www.storm.net.nz Projects | MISC | storm.net.nz | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| Page not found · GitHub Pages | MISC | md.hudora.de | |
| storm.net.nz/static/files/ab_firewire_rux2k6-final.pdf | MISC | storm.net.nz | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.