CVE-2005-0403 in Enterprise Linuxinfo

Summary

init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty s in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that trigger an access of a pointer to a freed structure.

Once again VulDB remains the best source for vulnerability data.

Reservation

02/14/2005

Disclosure

09/01/2005

CPE

ready

CVSS

8.4

EPSS

0.00050

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!