[kernel-sec-discuss] r1527 - active

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-10-19 22:11:11 +0000 (Mon, 19 Oct 2009)
New Revision: 1527

Added:
   active/CVE-2004-1191
Log:
another old one

Added: active/CVE-2004-1191
===================================================================
--- active/CVE-2004-1191	                        (rev 0)
+++ active/CVE-2004-1191	2009-10-19 22:11:11 UTC (rev 1527)
@@ -0,0 +1,19 @@
+Candidate: CVE-2009-1191
+Description:
+ Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more 
+ than 4GB of memory, could allow local users to read unauthorized memory from 
+ "foreign memory pages."
+References:
+ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1191
+ http://www.novell.com/linux/security/advisories/2004_42_kernel.html
+ http://xforce.iss.net/xforce/xfdb/18137
+Notes:
+ the secure-testing tracker indicates that this was fixed appropriately in all of the
+ linux-2.4 kernels released at the time; however, it also says that linux-2.6 needs
+ to be checked, which was never done.
+Bugs:
+upstream:
+linux-2.6:
+2.6.18-etch-security:
+2.6.24-etch-security:
+2.6.26-lenny-security: