CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
6.2 | $0-$5k | 0.00 |
A vulnerability was found in Linux Kernel 2.6.12/2.6.14.4 (Operating System). It has been rated as critical. This issue affects an unknown code of the component Keyboard Mapping Handler. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-264. Impacted is availability. The summary by CVE is:
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys.
The bug was discovered 10/15/2005. The weakness was disclosed 10/17/2005 by Rudolf Polzer with Debian (Website). The advisory is shared at bugs.debian.org. The identification of this vulnerability is CVE-2005-3257 since 10/18/2005. The attack needs to be initiated within the local network. No form of authentication is needed for a successful exploitation. Technical details are unknown but an exploit is available. MITRE ATT&CK project uses the attack technique T1068 for this issue.
The exploit is available at bugs.debian.org. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 122 days. During that time the estimated underground price was around $5k-$25k. The vulnerability scanner Nessus provides a plugin with the ID 20775 (Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-231-1)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Ubuntu Local Security Checks and running in the context l.
Applying a patch is able to eliminate this problem. The bugfix is ready for download at kernel.org. A possible mitigation has been published 3 months after the disclosure of the vulnerability.
The vulnerability is also documented in the vulnerability database at Tenable (20775). The entries 27131, 27121, 27081 and 27080 are pretty similar.
Product
Type
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 6.5VulDB Meta Temp Score: 6.2
VulDB Base Score: 6.5
VulDB Temp Score: 6.2
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Access controlCWE: CWE-264
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Partially
Availability: 🔍
Status: Proof-of-Concept
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 20775
Nessus Name: Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-231-1)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Nessus Port: 🔍
OpenVAS ID: 56469
OpenVAS Name: Debian Security Advisory DSA 1017-1 (kernel-source-2.6.8)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: no mitigation knownStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Patch: kernel.org
Timeline
06/17/2005 🔍10/15/2005 🔍
10/17/2005 🔍
10/17/2005 🔍
10/17/2005 🔍
10/17/2005 🔍
10/18/2005 🔍
10/18/2005 🔍
10/19/2005 🔍
12/22/2005 🔍
01/21/2006 🔍
01/03/2008 🔍
07/04/2019 🔍
Sources
Vendor: kernel.orgAdvisory: bugs.debian.org
Researcher: Rudolf Polzer
Organization: Debian
Status: Not defined
Confirmation: 🔍
CVE: CVE-2005-3257 (🔍)
OVAL: 🔍
Vulnerability Center: 17258 - Linux kernel 2.6.12 VT Implementation Allows Local Privilege Escalation, Medium
SecurityFocus: 15122 - Linux Kernel Console Keymap Local Command Injection Vulnerability
Secunia: 18203 - Ubuntu update for kernel, Less Critical
OSVDB: 20061 - Linux Kernel loadkeys Console Keyboard Mapping Local Privilege Escalation
See also: 🔍
Entry
Created: 10/19/2005 12:02Updated: 07/04/2019 18:45
Changes: 10/19/2005 12:02 (95), 07/04/2019 18:45 (3)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.