CVE-2004-1190 in Linuxinfo

Summary

suse linux before 9.1 and suse linux enterprise server before 9 do not properly check commands sent to cd devices that have been opened read-only which could allow local users to conduct unauthorized write activities to modify the firmware of associated scsi devices.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

12/13/2004

Disclosure

01/10/2005

CPE

ready

CVSS

4.0

EPSS

0.00085

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!