Linux Kernel EXT3文件系统信息泄露漏洞

漏洞信息详情

Linux Kernel EXT3文件系统信息泄露漏洞

• CNNVD编号：CNNVD-200406-007
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0177
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2004-06-01
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  linux
• 漏洞来源：
  Discovery of this …

Linux 2.4.26之前的2.4.x版本的ext3代码不正确初始化日报描述符块，导致写到ext3文件系统设备内存数据信息泄露。拥有特权的用户通过读取原生装置得到部分核心内存信息

The Fedora Legacy project has released advisory FLSA:2336 to address this issue for Red Hat Fedora Core 1, Red Hat Linux 7.3 and 9. Please see the referenced advisory for further information.
Red Hat has released advisory RHSA-2004:505-14 and fixes to address this issue and other issues on Red Hat Linux Enterprise platforms. Customers that are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.
Conectiva has released advisory CLA-2004:846 to provide Kernel updates to address this and other issues for Conectiva 8 and 9. Please see the referenced advisory for further details regarding obtaining and applying appropriate updates.
Conectiva has released advisory CLSA-2004:829 to provide Kernel updates for CLEE 1.0. Please see the attached advisory for details on how to apply updates.
Mandrake has released advisory MDKSA-2004:029 to address this and other kernel vulnerabilities. Please see the attached advisory for details on obtaining and applying fixes.
This issue has been addressed in versions 2.4.26 and 2.6.5 of the Linux Kernel.
Trustix has released an advisory TSLSA-2004-0020 with fixes to address this and other issues. Please see the referenced advisory for more information.
Debian has released advisory DSA 489-1 to provide updates for Linux 2.4.17 for the PowerPC/apus and S/390 architectures. Please see the attached advisory for details on applying and obtaining fixes.
Debian has released advisory DSA 491-1 to provide updates for Linux 2.4.19 on the MIPS architecture. Please see the attached advisory for details on applying and obtaining fixes.
Rad Hat has released advisory RHSA-2004:166-08 and fixes for Red Hat Linux version 9. Please see the referenced advisory for more information.
Debian has released an advisory (DSA 495-1) to address various issues in the Linux kernel. This advisory contains fixes for the ARM architecture. Please see the referenced advisory for more information.
EnGarde Secure Linux has released an advisory (ESA-20040428-004) to address various issues in the Linux kernel. Please see the referenced advisory for more information.
Gentoo Linux has released advisory GLSA 200407-02 addressing this and other issues. Please see the referenced advisory for further information about this issue and information on upgrading packages using emerge.
RedHat Linux has released advisory RHSA-2004:504-13 to address this, and other issues in RedHat Enterprise Linux operating systems with Itanium processors. Please see the referenced advisory for further information.
Avaya has released an advisory regarding this issue. They report that fixes will be released in the future. Please see the referenced Web advisory for more information.
Red Hat released advisory RHSA-2005:293-16 as well as fixes to address this and other issues on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisories for additional information.
Linux kernel 2.4 .0-test3

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test6

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test8

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test7

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test2

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test11

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test10

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test4

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test1

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test5

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4 .0-test12

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4.1

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4.11

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4.12

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4.13

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4.14

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4.15

• Linux linux-2.4.26.tar.bz2
  
  http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.26.tar.bz2

Linux kernel 2.4.16

• Debian kernel-doc-2.4.16_2.4.16-1woody2_all.debDebian GNU/Linux 3.0 alias woody
  
  http://security