National Cyber-Alert System

Vulnerability Summary for CVE-2008-1675

Overview

The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (05/06/2008)

Not vulnerable. This issue did not affect versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2008-3873

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-2501

Hyperlink:https://issues.rpath.com/browse/RPL-2501

External Source: XF

Name: linux-kernel-tehuti-bo(42132)

Hyperlink:http://xforce.iss.net/xforce/xfdb/42132

External Source: UBUNTU

Name: USN-614-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-614-1

External Source: SECTRACK

Name: 1019960

Hyperlink:http://www.securitytracker.com/id?1019960

External Source: BID

Name: 29014

Hyperlink:http://www.securityfocus.com/bid/29014

External Source: BUGTRAQ

Name: 20080507 rPSA-2008-0157-1 kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/491732/100/0/threaded

External Source: BUGTRAQ

Name: 20080502 rPSA-2008-0157-1 kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/491566/100/0/threaded

External Source: MANDRIVA

Name: MDVSA-2008:167

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:167

External Source: MANDRIVA

Name: MDVSA-2008:109

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:109

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1

External Source: VUPEN

Name: ADV-2008-1406

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2008/1406/references

External Source: CONFIRM

Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157

Hyperlink:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2008-0157

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2008-0157

External Source: SECUNIA

Name: 30515

Type: Advisory

Hyperlink:http://secunia.com/advisories/30515

External Source: SECUNIA

Name: 30260

Type: Advisory

Hyperlink:http://secunia.com/advisories/30260

External Source: SECUNIA

Name: 30044

Type: Advisory

Hyperlink:http://secunia.com/advisories/30044

External Source: SECUNIA

Name: 30017

Type: Advisory

Hyperlink:http://secunia.com/advisories/30017

External Source: MLIST

Name: [linux-kernel] 20080429 [04/12] tehuti: check register size (CVE-2008-1675)

Hyperlink:http://marc.info/?l=linux-kernel&m=120949582428998&w=2

External Source: MLIST

Name: [linux-kernel] 20080429 [27/37] tehuti: move ioctl perm check closer to function start

Hyperlink:http://marc.info/?l=linux-kernel&m=120949204619718&w=2

External Source: MLIST

Name: [linux-kernel] 20080429 [26/37] tehuti: check register size (CVE-2008-1675)

Hyperlink:http://marc.info/?l=linux-kernel&m=120949204519706&w=2