OSVDB ID: 57427

Title: Linux Kernel af_llc.c getsockname() Function Kernel Stack Fragment Disclosure

Info

Disclosure

Aug 24, 2009

Discovery

Unknown

Dates

Exploit

Aug 24, 2009

Solution

Unknown

Description

Classification

Location: Local Access Required
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Solution: Patch / RCS
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CVE ID: 2009-3001 (see also: NVD)
Bugtraq ID: 36126
Secunia Advisory ID: 36952 37105 37121 37230 37282 37293
ISS X-Force ID: 52732
Exploit Database: 9513
Milw0rm: 9513
Vendor Specific News/Changelog Entry: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc
http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc
http://lists.debian.org/debian-security-announce/2009/msg00237.html
http://lists.debian.org/debian-security-announce/2009/msg00251.html
http://lists.debian.org/debian-security-announce/2009/msg00252.html
https://bugzilla.redhat.com/show_bug.cgi?id=519305
https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00058.html
Generic Exploit URL: http://jon.oberheide.org/files/llc-getsockname-leak.c
Other Advisory URL: http://www.openwall.com/lists/oss-security/2009/08/26/1
Vendor Specific Advisory URL: http://www.ubuntu.com/usn/USN-852-1
http://www.us.debian.org/security/2009/dsa-1929

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/57427