Frank McIngvale LuxMan Memory File Descriptor Leakage Vulnerability
BID:6113
Info
Frank McIngvale LuxMan Memory File Descriptor Leakage Vulnerability
| Bugtraq ID: | 6113 |
| Class: | Access Validation Error |
| CVE: |
CVE-2002-1245 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 06 2002 12:00AM |
| Updated: | Jul 11 2009 06:06PM |
| Credit: | Discovery credited to Texonet (http://www.texonet.com). |
| Vulnerable: |
Frank McIngvale LuxMan 0.41 |
| Not Vulnerable: |
Frank McIngvale LuxMan 0.41 -19 Frank McIngvale LuxMan 0.41 -17 |
Discussion
Frank McIngvale LuxMan Memory File Descriptor Leakage Vulnerability
It has been reported that the 'maped' binary in LuxMan is vulnerable to a leakage of open file descriptors that may result in unauthorized disclosure of memory. It is allegedly possible for attackers to inherit open file descriptors with read/write access to /dev/mem by executing a malicious program through maped.
It has been reported that the 'maped' binary in LuxMan is vulnerable to a leakage of open file descriptors that may result in unauthorized disclosure of memory. It is allegedly possible for attackers to inherit open file descriptors with read/write access to /dev/mem by executing a malicious program through maped.
Exploit / POC
Frank McIngvale LuxMan Memory File Descriptor Leakage Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.