CVE-2002-1571

CVE-2002-1571 affects the Linux 2.4 kernel pre-2.4.19. The root cause is that the fninit instruction is assumed to clear all registers, which can cause an information leak on processors that do not clear all relevant SSE registers. The practical impact is potential leakage of information (partial...

CVE-2004-0163

Sygate Secure Enterprise (SSE) 3.5MR3 and earlier are affected by a replay-based DoS vulnerability. The issue stems from using a static encryption key for HTTP exchanges between SSE servers and SSA clients and the absence of replay protection, allowing an attacker to capture a valid session and r...

Linux Kernel <= 2.4.21 MXCSR Local DOS Exploitation

As I mentioned in my previous post to the list, I've been looking into x87 FPU stuff lately. While I was tinkering I ran into the MXCSR register, which reminded me of an old RedHat advisory with a vague description of a kernel vuln relating to the register. I don't recall anyone ever discussing...