CVE-2004-1190: Low severity suse suse linux vulnerability
SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1190?
CVE-2004-1190 is considered to have a moderate severity level due to the potential for unauthorized write access to important SCSI device firmware.
How do I fix CVE-2004-1190?
To fix CVE-2004-1190, you should upgrade to a newer version of SUSE Linux that has addressed this vulnerability.
Who is affected by CVE-2004-1190?
CVE-2004-1190 affects SUSE Linux versions 8.1, 8.2, and 9.0, including the Enterprise Server editions of these releases.
What type of attack is possible due to CVE-2004-1190?
CVE-2004-1190 allows local users to perform unauthorized write operations on SCSI devices by exploiting improper command checks.
Is CVE-2004-1190 a remote or local vulnerability?
CVE-2004-1190 is a local vulnerability, meaning that an attacker must have local access to the system to exploit it.