CVE-2005-3179

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.gentoo.org/show_bug.cgi?id=107893Patch, Vendor Advisory
http://secunia.com/advisories/17114Permissions Required, Third Party Advisory
http://secunia.com/advisories/17280Permissions Required, Third Party Advisory
http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235Broken Link
http://www.securityfocus.com/advisories/9549Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/15154Third Party Advisory, VDB Entry
http://bugs.gentoo.org/show_bug.cgi?id=107893Patch, Vendor Advisory
http://secunia.com/advisories/17114Permissions Required, Third Party Advisory
http://secunia.com/advisories/17280Permissions Required, Third Party Advisory
http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=d7067d7d1f92cba14963a430cfbd53098cbbc8fd
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235Broken Link
http://www.securityfocus.com/advisories/9549Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/15154Third Party Advisory, VDB Entry

Timeline

Published: Oct 12, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-31805.0The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length CVE-2005-31812.1The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function CVE-2005-31827.5Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers CVE-2005-31834.3The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation CVE-2005-318410.0Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvloc.c) in Ethereal allo CVE-2005-31857.5Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other CVE-2005-31867.5Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file CVE-2005-31875.0The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) via a long CVE-2005-31887.6Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending CVE-2005-31895.0Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequen CVE-2005-31907.5Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to e CVE-2005-31915.1Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream