Red Hat Enterprise Linux Kernel Multiple Vulnerabilities

Bugtraq ID:	12599
Class:	Unknown
CVE:	CVE-2005-0090 CVE-2005-0091 CVE-2005-0092
Remote:	No
Local:	Yes
Published:	Feb 19 2005 12:00AM
Updated:	Aug 05 2010 07:46PM
Credit:	Discovery is credited to Kirill Korotaev for one of the denial of service issues. The other issues were reported by the vendor.
Vulnerable:	Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Desktop 4.0
Not Vulnerable:

Red Hat Enterprise Linux Kernel Multiple Vulnerabilities

Red Hat Enterprise Linux kernel is reported prone to multiple vulnerabilities. These issues may allow local attackers to carry out denial of service attacks and gain elevated privileges.

The following specific issues were identified:

The Red Hat Enterprise Linux kernel is reported prone to two local denial of service vulnerabilities.

Another issue affecting the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch can allow local attackers to read and write to arbitrary kernel memory.

These issues are reported to affect the Red Hat Enterprise Linux 4 kernel.

Due to lack of details, further information is not available at the moment. This BID will be updated when more information becomes available.

Red Hat Enterprise Linux Kernel Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Red Hat Enterprise Linux Kernel Multiple Vulnerabilities

Solution:
Red Hat has released advisory RHSA-2005:092-14 to address these issues. Please see the advisory in Web references for more information.

Red Hat Enterprise Linux Kernel Multiple Vulnerabilities

References:

• RHSA-2005:092-14 - Important: kernel security update (RedHat)