CVE-2004-0685

Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.

🔗 References (38)

• cve@mitrehttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921
• cve@mitrehttp://secunia.com/advisories/20162
• cve@mitrehttp://secunia.com/advisories/20163
• cve@mitrehttp://secunia.com/advisories/20202
• cve@mitrehttp://secunia.com/advisories/20338
• cve@mitrehttp://www.debian.org/security/2006/dsa-1067
• cve@mitrehttp://www.debian.org/security/2006/dsa-1069
• cve@mitrehttp://www.debian.org/security/2006/dsa-1070
• cve@mitrehttp://www.debian.org/security/2006/dsa-1082
• cve@mitrehttp://www.gentoo.org/security/en/glsa/glsa-200408-24.xml
• cve@mitrehttp://www.kb.cert.org/vuls/id/981134
• cve@mitrehttp://www.redhat.com/support/errata/RHSA-2004-504.html
• cve@mitrehttp://www.redhat.com/support/errata/RHSA-2004-505.html
• cve@mitrehttp://www.securityfocus.com/bid/10892
• cve@mitrehttp://www.securityspace.com/smysecure/catid.html?id=14580