[32535] in bugtraq
Re: [aadams@securityfocus.com: Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation]
daemon@ATHENA.MIT.EDU (Matt Zimmerman)
Mon Nov 24 12:01:20 2003
Date: Sun, 23 Nov 2003 21:55:00 -0500
From: Matt Zimmerman <mdz@debian.org>
To: bugtraq@securityfocus.com
Message-ID: <20031124025459.GN9377@dijkstra.csh.rit.edu>
Mail-Followup-To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20031121001057.GA26614@securityfocus.com>
On Thu, Nov 20, 2003 at 05:10:57PM -0700, David Ahmad wrote:
> As far as I know, this bug was not discussed or exploited anywhere
> publicly. Also, the technique used to cause the memory copy to
> fail is clever and may be useful in other scenarios.
Perhaps not exploited, but it was definitely discussed.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2003-0248
http://www.debian.org/security/2003/dsa-311
http://www.debian.org/security/2003/dsa-332
http://www.redhat.com/support/errata/RHSA-2003-187.html
http://www.redhat.com/support/errata/RHSA-2003-195.html
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:066
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:074
--
- mdz
