SecurityFocus

[aadams (at) securityfocus (dot) com [email concealed]: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation] Nov 21 2003 12:10AM
David Ahmad (da securityfocus com) (2 replies)

Re: [aadams (at) securityfocus (dot) com [email concealed]: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation] Nov 24 2003 02:55AM
Matt Zimmerman (mdz debian org)

On Thu, Nov 20, 2003 at 05:10:57PM -0700, David Ahmad wrote:

> As far as I know, this bug was not discussed or exploited anywhere
> publicly. Also, the technique used to cause the memory copy to
> fail is clever and may be useful in other scenarios.

Perhaps not exploited, but it was definitely discussed.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=2003-0248
http://www.debian.org/security/2003/dsa-311
http://www.debian.org/security/2003/dsa-332
http://www.redhat.com/support/errata/RHSA-2003-187.html
http://www.redhat.com/support/errata/RHSA-2003-195.html
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003
:066
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003
:074

--
- mdz

[ reply ]

Re: [aadams (at) securityfocus (dot) com [email concealed]: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation] Nov 21 2003 09:52PM
Thilo Schulz (arny ats s bawue de)