CVE-2004-1190
Fixed in a distro release EPSS <1%
SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.
Products: suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 4 | kernel | 0:2.6.9-22.0.2.EL |
| Red Hat Enterprise Linux 4 | kernel-debuginfo | 0:2.6.9-22.0.2.EL |
| Red Hat Enterprise Linux 4 | kernel-devel | 0:2.6.9-22.0.2.EL |
| Red Hat Enterprise Linux 4 | kernel-doc | 0:2.6.9-22.0.2.EL |
| Red Hat Enterprise Linux 4 | kernel-hugemem | 0:2.6.9-22.0.2.EL |
| Red Hat Enterprise Linux 4 | kernel-hugemem-devel | 0:2.6.9-22.0.2.EL |
| Red Hat Enterprise Linux 4 | kernel-smp | 0:2.6.9-22.0.2.EL |
| Red Hat Enterprise Linux 4 | kernel-smp-devel | 0:2.6.9-22.0.2.EL |