CVE-2005-0750: High severity Conectiva Linux vulnerability
The bluezsockcreate function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0750?
CVE-2005-0750 is a privilege escalation vulnerability that is considered to have a high severity due to potential exploitation by local users.
How do I fix CVE-2005-0750?
To mitigate CVE-2005-0750, users should upgrade to the patched versions of the Linux kernel that are unaffected by this vulnerability.
Who is affected by CVE-2005-0750?
CVE-2005-0750 affects local users on systems running vulnerable versions of the Linux kernel, including 2.4.6 to 2.4.30 and 2.6 to 2.6.11.5.
What systems are vulnerable to CVE-2005-0750?
Vulnerable systems include various distributions of the Linux kernel, including Conectiva Linux 10.0, Red Hat Enterprise Linux 4.0, and several versions of Ubuntu, SUSE, and Fedora.
What can an attacker do with CVE-2005-0750?
An attacker exploiting CVE-2005-0750 can gain elevated privileges on a vulnerable system by using socket or socketpair calls with a negative protocol value.