Description (CNA)
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.redhat.com/support/errata/RHSA-2003-238.html
- http://www.debian.org/security/2004/dsa-423
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304
- http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A997
- http://www.redhat.com/support/errata/RHSA-2004-188.html
- http://www.debian.org/security/2004/dsa-358
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9330
ADP enrichment
No English description supplied.
- http://www.redhat.com/support/errata/RHSA-2003-238.html
- http://www.debian.org/security/2004/dsa-423
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304
- http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A997
- http://www.redhat.com/support/errata/RHSA-2004-188.html
- http://www.debian.org/security/2004/dsa-358
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9330