[kernel] r6279 - patch-tracking

[Moritz Muehlenhoff]

Author: jmm-guest
Date: Fri Mar 24 13:21:37 2006
New Revision: 6279

Added:
   patch-tracking/CVE-2006-1342
   patch-tracking/CVE-2006-1343
Log:
two information disclosure issues


Added: patch-tracking/CVE-2006-1342
==============================================================================
--- (empty file)
+++ patch-tracking/CVE-2006-1342	Fri Mar 24 13:21:37 2006
@@ -0,0 +1,22 @@
+Candidate: CVE-2006-1342
+References: 
+ http://marc.theaimsgroup.com/?l=linux-netdev&m=114148078223594&w=2
+ http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git;a=commit;h=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b
+Description:
+ net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero
+ before returning IPv4 socket names from the (1) getsockname, (2) getpeername,
+ and (3) accept functions, which allows local users to obtain portions of
+ potentially sensitive memory.
+Notes: 
+Bugs: 
+upstream: 
+linux-2.6:
+2.6.8-sarge-security: 
+2.4.27-sarge-security: 
+2.4.27:
+2.4.19-woody-security: 
+2.4.18-woody-security: 
+2.4.17-woody-security: 
+2.4.16-woody-security: 
+2.4.17-woody-security-hppa: 
+2.4.17-woody-security-ia64: 

Added: patch-tracking/CVE-2006-1343
==============================================================================
--- (empty file)
+++ patch-tracking/CVE-2006-1343	Fri Mar 24 13:21:37 2006
@@ -0,0 +1,22 @@
+Candidate: CVE-2006-1343
+References:
+ http://marc.theaimsgroup.com/?l=linux-netdev&m=114148078223594&w=2
+Description: 
+ net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and
+ possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not
+ clear sockaddr_in.sin_zero before returning IPv4 socket names from the
+ getsockopt function with SO_ORIGINAL_DST, which allows local users to
+ obtain portions of potentially sensitive memory.
+Notes: 
+Bugs: 
+upstream: 
+linux-2.6:
+2.6.8-sarge-security: 
+2.4.27-sarge-security: 
+2.4.27:
+2.4.19-woody-security: 
+2.4.18-woody-security: 
+2.4.17-woody-security: 
+2.4.16-woody-security: 
+2.4.17-woody-security-hppa: 
+2.4.17-woody-security-ia64: