low2.1
CVE-2004-0565
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users …
Impact
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mandrakesoft | Mandrake Multi Network Firewall | Version 8.2 |
| Gentoo | Linux | All versions |
| Linux | Linux Kernel | Version 2.4.0 |
| Mandrakesoft | Mandrake Linux | Versions 9.1, 9.2, 10.0 |
| Mandrakesoft | Mandrake Linux Corporate Server | Version 2.1 |
| Trustix | Secure Linux | Versions 2, 2.0, 2.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html
- http://secunia.com/advisories/20162
- http://secunia.com/advisories/20163
- http://secunia.com/advisories/20202
- http://secunia.com/advisories/20338
- http://www.debian.org/security/2006/dsa-1067
- http://www.debian.org/security/2006/dsa-1069
- http://www.debian.org/security/2006/dsa-1070
- http://www.debian.org/security/2006/dsa-1082
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:066
- http://www.redhat.com/support/errata/RHSA-2004-504.html
- http://www.securityfocus.com/bid/10687
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16644
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714
- http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html
- http://secunia.com/advisories/20162
- http://secunia.com/advisories/20163
- http://secunia.com/advisories/20202
- http://secunia.com/advisories/20338
- http://www.debian.org/security/2006/dsa-1067
- http://www.debian.org/security/2006/dsa-1069
- http://www.debian.org/security/2006/dsa-1070
- http://www.debian.org/security/2006/dsa-1082
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:066