medium6.8Public exploit code
CVE-2009-4067
Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.6.26 - Auerswald USB Device Driver Buffer Overflow (PoC)2009-10-19 · dos · linux · Verified
Impact
Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | before 2.6.27 |
| Redhat | Enterprise Linux | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://labs.mwrinfosecurity.com/files/Advisories/mwri_linux-usb-buffer-overflow_2009-10-29.pdf
- https://bugzilla.redhat.com/show_bug.cgi?id=722393
- http://labs.mwrinfosecurity.com/files/Advisories/mwri_linux-usb-buffer-overflow_2009-10-29.pdf
- https://bugzilla.redhat.com/show_bug.cgi?id=722393