Lucene search

[email protected]NVD:CVE-2005-0109

HistoryMar 05, 2005 - 5:00 a.m.

CVE-2005-0109

2005-03-0505:00:00

[email protected]

web.nvd.nist.gov

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%

JSON

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.

Affected configurations

NVD

Node

freebsdfreebsdMatch1.1.5.1

freebsdfreebsdMatch2.0

freebsdfreebsdMatch2.0.5

freebsdfreebsdMatch2.1.0

freebsdfreebsdMatch2.1.5

freebsdfreebsdMatch2.1.6

freebsdfreebsdMatch2.1.6.1

freebsdfreebsdMatch2.1.7.1

freebsdfreebsdMatch2.2

freebsdfreebsdMatch2.2.2

freebsdfreebsdMatch2.2.3

freebsdfreebsdMatch2.2.4

freebsdfreebsdMatch2.2.5

freebsdfreebsdMatch2.2.6

freebsdfreebsdMatch2.2.8

freebsdfreebsdMatch3.0

freebsdfreebsdMatch3.0releng

freebsdfreebsdMatch3.1

freebsdfreebsdMatch3.2

freebsdfreebsdMatch3.3

freebsdfreebsdMatch3.4

freebsdfreebsdMatch3.5

freebsdfreebsdMatch3.5stable

freebsdfreebsdMatch3.5.1

freebsdfreebsdMatch3.5.1release

freebsdfreebsdMatch3.5.1stable

freebsdfreebsdMatch4.0

freebsdfreebsdMatch4.0alpha

freebsdfreebsdMatch4.0releng

freebsdfreebsdMatch4.1

freebsdfreebsdMatch4.1.1

freebsdfreebsdMatch4.1.1release

freebsdfreebsdMatch4.1.1stable

freebsdfreebsdMatch4.2

freebsdfreebsdMatch4.2stable

freebsdfreebsdMatch4.3

freebsdfreebsdMatch4.3release

freebsdfreebsdMatch4.3release_p38

freebsdfreebsdMatch4.3releng

freebsdfreebsdMatch4.3stable

freebsdfreebsdMatch4.4

freebsdfreebsdMatch4.4release_p42

freebsdfreebsdMatch4.4releng

freebsdfreebsdMatch4.4stable

freebsdfreebsdMatch4.5

freebsdfreebsdMatch4.5release

freebsdfreebsdMatch4.5release_p32

freebsdfreebsdMatch4.5releng

freebsdfreebsdMatch4.5stable

freebsdfreebsdMatch4.6

freebsdfreebsdMatch4.6release

freebsdfreebsdMatch4.6release_p20

freebsdfreebsdMatch4.6releng

freebsdfreebsdMatch4.6stable

freebsdfreebsdMatch4.6.2

freebsdfreebsdMatch4.7

freebsdfreebsdMatch4.7release

freebsdfreebsdMatch4.7release_p17

freebsdfreebsdMatch4.7releng

freebsdfreebsdMatch4.7stable

freebsdfreebsdMatch4.8

freebsdfreebsdMatch4.8pre-release

freebsdfreebsdMatch4.8release_p6

freebsdfreebsdMatch4.8releng

freebsdfreebsdMatch4.9

freebsdfreebsdMatch4.9pre-release

freebsdfreebsdMatch4.9releng

freebsdfreebsdMatch4.10

freebsdfreebsdMatch4.10release

freebsdfreebsdMatch4.10release_p8

freebsdfreebsdMatch4.10releng

freebsdfreebsdMatch4.11release_p3

freebsdfreebsdMatch4.11releng

freebsdfreebsdMatch4.11stable

freebsdfreebsdMatch5.0

freebsdfreebsdMatch5.0alpha

freebsdfreebsdMatch5.0release_p14

freebsdfreebsdMatch5.0releng

freebsdfreebsdMatch5.1

freebsdfreebsdMatch5.1alpha

freebsdfreebsdMatch5.1release

freebsdfreebsdMatch5.1release_p5

freebsdfreebsdMatch5.1releng

freebsdfreebsdMatch5.2

freebsdfreebsdMatch5.2.1release

freebsdfreebsdMatch5.2.1releng

freebsdfreebsdMatch5.3

freebsdfreebsdMatch5.3release

freebsdfreebsdMatch5.3releng

freebsdfreebsdMatch5.3stable

freebsdfreebsdMatch5.4pre-release

freebsdfreebsdMatch5.4release

redhatenterprise_linuxMatch2.1advanced_server

redhatenterprise_linuxMatch2.1advanced_server_ia64

redhatenterprise_linuxMatch2.1enterprise_server

redhatenterprise_linuxMatch2.1enterprise_server_ia64

redhatenterprise_linuxMatch2.1workstation

redhatenterprise_linuxMatch2.1workstation_ia64

redhatenterprise_linuxMatch3.0advanced_server

redhatenterprise_linuxMatch3.0enterprise_server

redhatenterprise_linuxMatch3.0workstation_server

redhatenterprise_linuxMatch4.0advanced_server

redhatenterprise_linuxMatch4.0enterprise_server

redhatenterprise_linuxMatch4.0workstation

redhatenterprise_linux_desktopMatch3.0

redhatenterprise_linux_desktopMatch4.0

redhatfedora_coreMatchcore_3.0

scoopenserverMatch5.0.7

scounixwareMatch7.1.3

scounixwareMatch7.1.3_up

scounixwareMatch7.1.4

sunsolarisMatch7.0x86

sunsolarisMatch8.0x86

sunsolarisMatch9.0x86

sunsolarisMatch9.0x86_update_2

sunsolarisMatch10.0sparc

ubuntuubuntu_linuxMatch4.1ia64

ubuntuubuntu_linuxMatch4.1ppc

ubuntuubuntu_linuxMatch5.04amd64

ubuntuubuntu_linuxMatch5.04i386

ubuntuubuntu_linuxMatch5.04powerpc

References

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt

marc.info/?l=freebsd-hackers&m=110994026421858&w=2

marc.info/?l=freebsd-security&m=110994370429609&w=2

marc.info/?l=openbsd-misc&m=110995101417256&w=2

secunia.com/advisories/15348

secunia.com/advisories/18165

securitytracker.com/id?1013967

sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1

www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754

www.daemonology.net/hyperthreading-considered-harmful/

www.daemonology.net/papers/htt.pdf

www.kb.cert.org/vuls/id/911878

www.redhat.com/support/errata/RHSA-2005-476.html

www.redhat.com/support/errata/RHSA-2005-800.html

www.securityfocus.com/bid/12724

www.vupen.com/english/advisories/2005/0540

www.vupen.com/english/advisories/2005/3002

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%

JSON

Related for NVD:CVE-2005-0109

freebsd1 cert1 openvas2 cvelist1 nessus8 cve1 securityvulns3 freebsd_advisory1 ubuntucve1 centos4 redhat2 ubuntu1 oraclelinux3