Linux Kernel HbaApiNode Improper File Permissions Denial of Service Vulnerability
BID:10279
Info
Linux Kernel HbaApiNode Improper File Permissions Denial of Service Vulnerability
| Bugtraq ID: | 10279 |
| Class: | Design Error |
| CVE: |
CVE-2004-0587 |
| Remote: | No |
| Local: | Yes |
| Published: | May 03 2004 12:00AM |
| Updated: | Jul 12 2009 04:07AM |
| Credit: | This issue was disclosed in a SuSE advisory. |
| Vulnerable: |
SuSE SUSE Linux Enterprise Server 8 SuSE Linux 8.1 SGI ProPack 3.0 S.u.S.E. Linux Personal 9.0 Redhat Fedora Core1 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Mandriva Linux Mandrake 10.0 AMD64 Mandriva Linux Mandrake 10.0 Mandriva Linux Mandrake 9.2 amd64 Mandriva Linux Mandrake 9.2 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 |
| Not Vulnerable: | |
Discussion
Linux Kernel HbaApiNode Improper File Permissions Denial of Service Vulnerability
A vulnerability has been identified in the SuSE Linux kernel that may allow a local attacker to cause a denial of service condition on a vulnerable system. The issue is reported to be caused by improper file permissions on '/proc/scsi/qla2300/HbaApiNode' file.
SuSE Linux Enterprise Server 8.0, SuSE Linux 8.1 and 9.0 are reported to be affected by this issue as well as other linux operating systems.
According to a RedHat advisory, this issue also affects Fedora Core 1.
Due to a lack of details, further information cannot be provided at the moment. This BID will be updated as more information becomes available.
A vulnerability has been identified in the SuSE Linux kernel that may allow a local attacker to cause a denial of service condition on a vulnerable system. The issue is reported to be caused by improper file permissions on '/proc/scsi/qla2300/HbaApiNode' file.
SuSE Linux Enterprise Server 8.0, SuSE Linux 8.1 and 9.0 are reported to be affected by this issue as well as other linux operating systems.
According to a RedHat advisory, this issue also affects Fedora Core 1.
Due to a lack of details, further information cannot be provided at the moment. This BID will be updated as more information becomes available.
Exploit / POC
Linux Kernel HbaApiNode Improper File Permissions Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux Kernel HbaApiNode Improper File Permissions Denial of Service Vulnerability
Solution:
SGI has made available Patch 10096 and advisory (20040804-01-U), correcting this and other vulnerabilities for systems running SGI ProPack 3.
Patch 10096 is available from:
ftp://patches.sgi.com/support/free/security/patches/ProPack/3/
Please see the referenced advisory for further details regarding obtaining and applying appropriate updates.
SuSE Linux has released an advisory (SuSE-SA:2004:010) to address various issues in the Linux kernel. Please see the referenced advisory for more information.
Mandrake has issued fixes, listed in advisory MDKSA-2004:050. See referenced advisory for more information.
RedHat has released an advisory (FEDORA-2004-186) to address this and other issues in Fedora Core 1. Please see the referenced advisory for more information.
Mandrake has released advisory MDKSA-2004:066 dealing with this issue. Please see the referenced advisory for more information.
Red Hat has released advisory RHSA-2004:418-05 and RHSA-2004:413-07 and fixes to address this and other issues on Red Hat Linux Enterprise 2.1 and 3.0 platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.
Red Hat has released advisory RHSA-2004:327-09 along with fixes to address this issue for Red Hat Enterprise Linux 2.1 for Itanium processors. Please see the referenced advisory for further information.
Solution:
SGI has made available Patch 10096 and advisory (20040804-01-U), correcting this and other vulnerabilities for systems running SGI ProPack 3.
Patch 10096 is available from:
ftp://patches.sgi.com/support/free/security/patches/ProPack/3/
Please see the referenced advisory for further details regarding obtaining and applying appropriate updates.
SuSE Linux has released an advisory (SuSE-SA:2004:010) to address various issues in the Linux kernel. Please see the referenced advisory for more information.
Mandrake has issued fixes, listed in advisory MDKSA-2004:050. See referenced advisory for more information.
RedHat has released an advisory (FEDORA-2004-186) to address this and other issues in Fedora Core 1. Please see the referenced advisory for more information.
Mandrake has released advisory MDKSA-2004:066 dealing with this issue. Please see the referenced advisory for more information.
Red Hat has released advisory RHSA-2004:418-05 and RHSA-2004:413-07 and fixes to address this and other issues on Red Hat Linux Enterprise 2.1 and 3.0 platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.
Red Hat has released advisory RHSA-2004:327-09 along with fixes to address this issue for Red Hat Enterprise Linux 2.1 for Itanium processors. Please see the referenced advisory for further information.
References
Linux Kernel HbaApiNode Improper File Permissions Denial of Service Vulnerability
References:
References: