{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Noyau Linux versions 2.4.26 et ant\u00e9rieures ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"noyau Linux versions 2.6.7 et ant\u00e9rieures.","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le traitement des pointeurs vers\nles indices de d\u00e9calage dans les fichiers (file offset) sur 64 bits.  \n\nUn utilisateur local mal intentionn\u00e9 peut exploiter cette vuln\u00e9rabilit\u00e9\npour acc\u00e8der \u00e0 certaines parties de la m\u00e9moire du noyau. Il est possible\nd'y trouver certaines informations confidentielles (mots de passe par\nexemple).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2004:413 du 03 ao\u00fbt 2004 :","url":"http://rhn.redhat.com/errata/RHSA-2004-413.html"},{"title":"Bulletin de s\u00e9curit\u00e9 SuSE SuSE-SA:2004:024 du 09 ao\u00fbt 2004    :","url":"http://www.suse.com/de/security/2004_24_kernel.html"},{"title":"Mise \u00e0 jour de s\u00e9curit\u00e9 pour ``VMware ESX Server 2.1.2'' :","url":"http://www.vmware.com/download/esx/esx212-10921update.html"},{"title":"Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200408-24 du 25 ao\u00fbt 2004    :","url":"http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml"},{"title":"Site Internet du noyau Linux :","url":"http://www.kernel.org"},{"title":"Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2004:418 du 03 ao\u00fbt 2004 :","url":"http://rhn.redhat.com/errata/RHSA-2004-418.html"},{"title":"Mise \u00e0 jour de s\u00e9curit\u00e9 pour ``VMware ESX Server 1.5.2'' :","url":"http://www.vmware.com/download/esx/esx152-10816update.html"},{"title":"Mise \u00e0 jour de s\u00e9curit\u00e9 pour ``VMware ESX Server 2.0.1'' :","url":"http://www.vmware.com/download/esx/esx201-11429update.html"},{"title":"Bulletin de s\u00e9curit\u00e9 Mandrake MDKSA-2004:087 du 26 ao\u00fbt    2004 :","url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087"}],"reference":"CERTA-2004-AVI-265","revisions":[{"description":"version initiale.","revision_date":"2004-08-05T00:00:00.000000"},{"description":"ajout r\u00e9f\u00e9rence aux bulletins de s\u00e9curit\u00e9 de SuSE, Gentoo et Mandrake.","revision_date":"2004-08-30T00:00:00.000000"},{"description":"ajout r\u00e9f\u00e9rence aux mises \u00e0 jour de s\u00e9curit\u00e9 VMware.","revision_date":"2005-01-20T00:00:00.000000"}],"risks":[{"description":"Divulgation d'informations confidentielles"}],"summary":"Une vuln\u00e9rabilit\u00e9 du noyau Linux permet \u00e0 un utilisateur local mal\nintentionn\u00e9 d'avoir acc\u00e8s \u00e0 des informations confidentielles.\n","title":"Vuln\u00e9rabilit\u00e9 du noyau Linux","vendor_advisories":[{"published_at":null,"title":"Avis de s\u00e9curit\u00e9 d'ISEC du 04 ao\u00fbt 2004","url":"http://isec.pl/vulnerabilities/isec-0016-procleaks.txt"}]}